Data Breach at HackerOne: Employee Information Compromised
HackerOne, a prominent bug bounty platform, has revealed that sensitive data belonging to 287 employees has been stolen due to a cyberattack on Navia, a U.S. benefits administrator. The breach, which occurred between December 22, 2025, and January 15, 2026, was linked to a vulnerability that allowed unauthorized access to Navia’s systems.
Affected individuals include employees from various high-profile companies and U.S. government agencies. The stolen data includes Social Security numbers, addresses, and other personal information, raising concerns about potential phishing attacks.
HackerOne is urging impacted employees to stay vigilant by monitoring their financial accounts and being cautious of suspicious communications. They are also offering a 12-month free identity protection service through Navia.
Given the sensitive nature of the exposed data, the risk level for affected individuals is deemed High.
Source: View Original Report
