.png)
HackerOne Data Breach Lawsuit Investigation
Shamis & Gentile P.A., one of the nation's premier class action law firms specializing in data breach cases, is investigating the HackerOne Inc. data breach.
If you were affected by the data breach, your sensitive personally identifiable information may have been exposed, and you may be eligible for compensation.
About HackerOne
HackerOne Inc. is a San Francisco-based computer and network security company founded in 2012. The company is known for pioneering bug bounty programs and connecting organizations with ethical hackers and security researchers to identify and fix vulnerabilities in software, cloud, AI systems and more.
HackerOne has worked with a wide range of clients, including U.S. government agencies, major tech companies and financial institutions. The company leverages a global community of security researchers and artificial intelligence to help organizations discover, validate and remediate vulnerabilities.
What Happened?
HackerOne discovered on Jan. 23, 2026, that one of its U.S. benefits administrators, Navia, experienced a security incident that may have impacted personal data of HackerOne employees and their dependents.
The root cause was a Broken Object Level Authorization (BOLA) vulnerability, which allowed an unauthorized actor to access Navia data between Dec. 22, 2025, and Jan. 15, 2026.
Navia notified impacted companies by letter dated Feb. 20, 2026, but HackerOne did not receive the notification until March. The company has since confirmed the types of information that were exposed.
A total of 287 individuals in the United States were affected by this breach, including one in Maine. Written notifications to consumers began March 17, 2026.
Information Exposed:
- Social security numbers
- Full names
- Addresses
- Phone numbers
- Dates of birth
- Email addresses
- Health plan participation
- Non-health plan participation
- Plan enrollment dates, effective dates, termination dates
You May Be Entitled to Compensation
If you were affected by the HackerOne Inc. data breach, you may be eligible for compensation. Lawyers are currently investigating potential claims on behalf of individuals whose information was exposed. Completing the below form can help determine if you qualify to join a lawsuit and pursue compensation for any damages or risks related to this breach.
.svg)