Summary
- Environment: One Navigate360 system and copied data files
- Operational impact: Data copied; detailed review identified potentially affected information
- Financial impact: No financial loss established in the reviewed evidence
- Record status: Developing record. Reviewed October 28, 2026; updated as evidence emerges.
What happened
Navigate360 detected suspicious activity on or about March 18, 2026. Its notification template says an investigation found unauthorized system access and data copying between November 21, 2025 and March 5, 2026. [1]
Impact
The template identifies names but leaves additional recipient-specific data fields blank. It reports no evidence of fraud or identity theft, without a completed letter date. Those omissions do not support claims about specific identifiers or current misuse. [1]
South Carolina’s notification index lists 10,297 affected residents and an October 27 report date. That state figure is not the total population. [3]
Timeline
Access-and-copying window begins
The reported access window begins in 2025.
[1]Access-and-copying window ends
The investigation dates the end of the window to March 5.
[1]Suspicious activity detected
The company became aware on or about this date.
[1]State report listed
The regulator lists its resident count and report date.
[3]Briefing updated
This briefing was last reviewed and updated on October 28, 2026.
Threat Group & Attack Vector
The notice does not identify an entry method or named attacker. [1]
Actors
- No threat actor group has been identified in the reviewed public evidence.
TTPs
- No specific MITRE ATT&CK technique is currently mapped for this case.
Response
Navigate360 applied mitigation and additional safeguards, engaged cybersecurity and data-review specialists, and notified law enforcement and regulators. Credit monitoring and identity protection were offered, but the public template leaves their duration unspecified. [1]