Navient Corporation (CIK 0001593538) filed an 8-K on July 2, 2026, disclosing a material cybersecurity incident under Item 1.05. On June 8, 2026, Navient became aware that a third-party law firm experienced a ransomware attack. The attacker accessed Navient-related borrower data (names, DOB, addresses, SSNs) maintained by the firm. Navient's own systems were not directly accessed. The incident was deemed material on June 29, 2026. Navient engaged external experts, notified law enforcement, and is notifying affected individuals and regulators.