HackerOne
Disclosed Mar 18, 20266 months ago287 affectedConfirmed
HackerOne employee SSNs exposed in Navia benefits breach
Bug bounty platform HackerOne notified 287 employees that their SSNs and other personal and dependent data were stolen through a broken object level authorization flaw at benefits administrator Navia.
What is known
| People affected | 287 (as reported by the organization) |
|---|---|
| Disclosed | Mar 18, 2026 |
| Happened | Dec 22, 2025 |
| Attack | Vendor breach |
| Data exposed | Names, Social Security numbers, Addresses, Phone numbers, Dates of birth, Emails |
| Sector | Tech · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| HackerOne discloses employee data breach after Navia hackbleepingcomputer.com · News | News |
| Maine AG breach notice: HackerOnemaine.gov · Regulator | Regulator |
| Indiana Attorney General 2026 data breach report: HackerOnein.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| Indiana AGresidents of IN | Mar 18 | 3 |
| Researchtotal | Mar 24 | 287 |