HackerOne
Disclosed Mar 18, 2026287 affectedConfirmed
HackerOne employee SSNs exposed in Navia benefits breach
Bug bounty platform HackerOne notified 287 employees that their SSNs and other personal and dependent data were stolen through a broken object level authorization flaw at benefits administrator Navia.
What is known
| People affected | 287 (as reported by the organization) |
|---|---|
| Disclosed | Mar 18, 2026 |
| Happened | Dec 22, 2025 |
| Attack | Vendor breach |
| Data exposed | NamesSocial Security numbersAddressesPhone numbersDates of birthEmails |
| Sector | Tech · US |
| Status | Confirmed |