+- Hack Forums (https://hackforums.net)
+-- Forum: General Topics (https://hackforums.net/forumdisplay.php?fid=7)
+--- Forum: World (https://hackforums.net/forumdisplay.php?fid=445)
+---- Forum: News and Happenings (https://hackforums.net/forumdisplay.php?fid=89)
+---- Thread: HackerOne discloses employee data breach after Navia hack (/showthread.php?tid=6322616)
HackerOne discloses employee data breach after Navia hack - MadScientist - Mar 24, 2026
"At this time, we have been informed that a Broken Object Level Authorization (BOLA) vulnerability led to an unknown actor accessing Navia data between December 22, 2025, and January 15, 2026," the company said. "On January 23, 2026, Navia became aware of suspicious activity in their environment. Navia sent letters dated February 20, 2026 to impacted companies."
Source - https://www.bleepingcomputer.com/news/security/hackerone-discloses-employee-data-breach-after-navia-hack/