Navvis & Company, a comprehensive healthcare network operating across the US, encountered a severe cyberattack in mid-July, compromising the data of 462,861 individuals, primarily in Hawaii. The breach, as reported by the Hawaii Attorney General, involved an unauthorized party breaching Navvis’ systems, gaining access to files containing sensitive information. The stolen data includes names, birthdays, health plan details, medical information, account numbers, patient account data, case ID numbers, provider details, and health record specifics, escalating the risk of identity and medical information misuse for the victims.
Navvis responded promptly, acknowledging the breach on its website and disclosing that the unauthorized access occurred around July 12th, 2023, lasting until July 25th. The company has initiated the process of sending impact notices to the affected parties. The stolen information is not limited to Hawaii, as Navvis serves healthcare options nationwide. The cybercriminals’ motives may involve selling the data online, launching further attacks, or holding it for future misuse, emphasizing the urgency for victims to mitigate potential consequences.
In the aftermath of the breach, impacted parties are advised to secure their accounts with complex passwords, consider account monitoring services, and contact providers and insurance agents for thorough documentation of statements and benefits. This breach underscores the critical need for heightened cybersecurity measures in the healthcare sector and the imperative for affected individuals to take proactive steps to safeguard their information.
