Every public data breach

44 disclosed this week · 26,355 on record

Navvis

Disclosed Sep 22, 20232,824,726 affectedConfirmed

Official notice

The business associate (BA), Navvis & Company, LLC, reported that it experienced a phishing and ransomware attack that compromised the protected health information (PHI) of 2,824,726 individuals. The PHI involved included names, addresses, dates of birth, Social Security numbers, claims information, diagnoses/conditions, and other treatment information. The BA HHS, affected individuals, the media, and provided substitute notice. The BA offered complimentary credit monitoring services to affected individuals and implemented additional administrative and technical safeguards to better protect PHI.

What is known

People affected2,824,726 (as reported by the organization)
DisclosedSep 22, 2023
DiscoveredJul 25, 2023
HappenedJul 12, 2023
AttackRansomware
Data exposedNamesHealthInsurance
SectorHealthcare · US
StatusConfirmed

Sources

Notices filed

History of this record
disclosed2026-09-25
2023-10-06 to 2023-09-22by backfillSource
summary2026-09-25
empty to The business associate (BA), Navvis & Company, LLC, reported that it experienced a phishing and ransomware attack that compromised the protected health information (PHI) of 2,824,726 individuals. The PHI involved included names, addresses, by backfillSource
disclosed2026-09-25
2023-12-29 to 2023-10-06by backfillSource
source2026-09-25
empty to https://ago.vermont.gov/document/2024-06-06-navvis-company-data-breach-notice-consumersby backfillSource
data_types2026-09-25
[] to ["names","health","insurance"]by backfillSource
records_basis2026-09-25
empty to organizationby backfillSource
records2026-09-25
empty to 2824726by backfillSource
sector2026-09-25
other to healthby backfillSource
attack2026-09-25
unknown to ransomwareby backfillSource
discovered2026-09-25
empty to 2023-07-25by backfillSource
disclosed2026-09-25
2024-01-09 to 2023-12-29by backfillSource
disclosed2026-09-25
2024-02-09 to 2024-01-09by backfillSource
disclosed2026-09-25
2024-06-06 to 2024-02-09by backfillSource
Added2026-09-25
First recordedby backfillSource

First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.

Everything about Navvis