Navvis & Company, LLC data breach (2023)

MOHHS OCRFirst filinglinked via same-victim cross-source · 100%

Filed Sep 22, 2023bd_094d4ec0bd999e89

Navvis & Company, LLC reported to HHS on 2023-09-22 a Hacking/IT Incident affecting 2,824,726 individuals. Breached information located on Network Server. The business associate experienced a phishing and ransomware attack compromising PHI including names, addresses, DOB, SSN, claims, and diagnoses. The BA offered credit monitoring and implemented safeguards.

Affected (this filing): 2,824,726

HHS notified

🧀Wisconsin State AGlinked via same-victim cross-source · 100%

🍁Vermont State AGlinked via same-victim cross-source · 100%

Filed Oct 6, 2023bd_593a06ed2b96ccf5

Navvis & Company, LLC, a healthcare management services provider, disclosed a cybersecurity incident where an unauthorized actor accessed systems between July 12 and July 25, 2023. Suspicious activity was identified on July 25, 2023. The incident may have exposed names and other PII. Navvis secured its network, launched an investigation, enhanced privacy policies, notified regulators, and offered credit monitoring services to affected individuals.

VT AG >45 bday

⛰️New Hampshire State AGlinked via same-victim cross-source · 100%

Filed Oct 6, 2023bd_d714d292e093d169

Navvis & Company, LLC, a healthcare management services provider, disclosed a cybersecurity incident to New Hampshire residents on October 6, 2023. Unauthorized access occurred between July 12 and July 25, 2023, when an actor accessed systems containing personal information. Navvis notified law enforcement, implemented safeguards, and offered credit monitoring. The specific data elements are redacted in the template but likely include identity and government identifiers.

Navvis & Company, LLC

Litigation Timing

Timeline