Navvis & Company, LLC

Organization

Navvis & Company, LLC

Source

California AG · source record

Date reported

Jun 6, 2024

Date(s) of breach

Wednesday, July 12, 2023Tuesday, July 25, 2023

Residents affected

Not published by this source

Data exposed

Financial / bank account Medical / health information Date of birth Name

Notice letter

Sample notice (PDF)

Discovered

Jul 25, 2023, as stated in the letter

"Through its investigation, Navvis determined that, between July 12, 2023 – July 25, 2023, it was a victim of a cyber-attack, and a threat actor may have had access to certain systems that stored personal and protected health information."

Days to notice

317 days from discovery (Jul 25, 2023) to the California record (Jun 6, 2024). Statute: 30 days from discovery or notification of the breach (Cal. Civ. Code § 1798.82). Over the statutory period

Offered in the letter

credit or identity monitoring through Experian

First seen by BreachTally

2026-10-30 15:40 UTC

Dates and counts as filed by the organization with the agency. The breach window and the report date often differ by months.