AccidentalMisdeliveryEmployee Data InvolvedCustomer Data InvolvedPIIIDENTITY_GOVERNMENTMediumResolved
Nava PBC
bd_dd323b784dbd6a3e · schema v1 · pii pii-v1
Full breach record for Nava PBC →On April 29, 2025, Nava PBC discovered that personal information of current and former employees—including names and Social Security numbers—was inadvertently sent to an unknown individual on April 28, 2025. A comprehensive review was completed on May 5, 2025. Two Maine residents were notified on May 9, 2025, out of 504 total affected individuals. Nava notified the FBI and IRS and offered 24 months of Experian IdentityWorks credit monitoring at no cost.
Maine clockDiscovered Apr 29, 2025 → Filed with AG May 9, 202510d ✓ ME AG ≤30d10 days discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed2 affectedView incident
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/b8e293c2-7dd8-45d3-8bfc-f8651f60a7dd.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- May 9, 2025
- Raw hash
- edb34195eba9de69fbd312ec9f06200ccc2e308adc2f877ebf81cbe8bd5ba3fd
Reporting entity
- Name
- Nava PBCnorm: nava pbc
- Domain
- navapbc.com
- Industry
- Other Government Entity
Victim entity
- Name
- Nava PBCnorm: nava pbc
- Domain
- navapbc.com
- Industry
- Other Government Entity
Incident
- Discovered
- Apr 29, 2025
- Materiality determined
- —
- Notification sent
- May 9, 2025
- Affected individuals
- 2
- Data types
- PIIIDENTITY_GOVERNMENT
- Attack vector
- Unknown
- Regulator citations
- Notified Maine Attorney GeneralNotified federal law enforcement (FBI and IRS)
Compliance
- Time to disclose
- 10 days(10 days from discovery to filing)
- Compliance flags
- ME AG ≤30d · 10d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Apr 29, 2025→ Filed with AG: May 9, 202510d 30 days ME AG ≤30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.