--- title: "Navigate360 system-data incident" description: "Navigate360 reported unauthorized system access and data copying from November 2025 to March 2026, followed by state notifications." incident_type: "Cybersecurity incident" status: "active" last_modified: "2026-10-28" canonical_url: "https://www.ally.security/incidents/navigate360-system-data-incident-2025" markdown_url: "https://www.ally.security/incidents/navigate360-system-data-incident-2025.md" stix_url: "https://www.ally.security/incidents/navigate360-system-data-incident-2025/stix.json" --- # Navigate360 system-data incident South Carolina lists 10,297 affected residents; the public template leaves additional data fields and monitoring duration unspecified. Last modified Oct 28, 2026 · 3 sources ## Summary - **Environment:** One Navigate360 system and copied data files - **Operational impact:** Data copied; detailed review identified potentially affected information - **Financial impact:** No financial loss established in the reviewed evidence ## What happened [Navigate360](https://navigate360.com/) detected suspicious activity on or about March 18, 2026. Its [notification template](https://oag.ca.gov/system/files/Navigate360%20-%20Notification%20Template.pdf) says an investigation found unauthorized system access and data copying between November 21, 2025 and March 5, 2026. [1](#source-1) ## Impact The template identifies names but leaves additional recipient-specific data fields blank. It reports no evidence of fraud or identity theft, without a completed letter date. Those omissions do not support claims about specific identifiers or current misuse. [1](#source-1) [South Carolina's notification index](https://consumer.sc.gov/identity-theft-unit/security-breach-notices) lists 10,297 affected residents and an October 27 report date. That state figure is not the total population. [3](#source-3) ## Timeline ### November 21, 2025 — Access-and-copying window begins The reported access window begins in 2025. [1](#source-1) ### March 5, 2026 — Access-and-copying window ends The investigation dates the end of the window to March 5. [1](#source-1) ### March 18, 2026 — Suspicious activity detected The company became aware on or about this date. [1](#source-1) ### October 27, 2026 — State report listed The regulator lists its resident count and report date. [3](#source-3) ### October 28, 2026 — Briefing updated This briefing was last reviewed and updated on October 28, 2026. ## Threat Group & Attack Vector The notice does not identify an entry method or named attacker. [1](#source-1) ### Actors - No threat actor group has been identified in the reviewed public evidence. ### TTPs - No specific MITRE ATT\&CK technique is currently mapped for this case. ## Response Navigate360 applied mitigation and additional safeguards, engaged cybersecurity and data-review specialists, and notified law enforcement and regulators. Credit monitoring and identity protection were offered, but the public template leaves their duration unspecified. [1](#source-1) ## Assets [Download the case-scoped STIX 2.1 bundle]() ## Sources Primary source records used to research this incident. ### Navigate360 notice of data security incident official · Navigate360 ### Navigate 360, LLC data breach notification regulatory · California Attorney General · Oct 23, 2026 ### Security Breach Notices regulatory · South Carolina Department of Consumer Affairs
Evidence ledger Review the supporting structured claims. 1. **Resulted In · 100% confidence · current** Navigate360 system-data breach: Reported access-and-copying window begins 2. **Occurred At · 100% confidence · current** South Carolina report listed: 2026-10-27 3. **Resulted In · 100% confidence · current** Navigate360 system-data breach: Navigate360’s investigation found that an unauthorized third party accessed one system and copied data between November 21, 2025 and March 5, 2026. It became aware of suspicious activity on or about March 18. 4. **Resulted In · 100% confidence · current** Navigate360 system-data breach: Navigate360 instituted mitigation and enhanced safeguards, hired cybersecurity and data-review specialists, and notified law enforcement and regulators. It offered credit monitoring and identity protection; the public template leaves the duration blank. 5. **Resulted In · 100% confidence · current** Navigate360 system-data breach: South Carolina’s notice index lists 10,297 affected state residents and an October27,2026 report date. This is a jurisdiction-specific count, not the total affected population. 6. **Resulted In · 100% confidence · current** Navigate360 system-data breach: The public template says potentially affected information includes names and additional recipient-specific fields left as placeholders. It reports no evidence of use for fraud or identity theft, without an ascertainable letter date. 7. **Resulted In · 100% confidence · current** Navigate360 system-data breach: Suspicious activity identified on or about this date 8. **Occurred At · 100% confidence · current** Suspicious activity identified on or about this date: 2026-03-18 9. **Discovered At · 100% confidence · current** Navigate360 system-data breach: 2026-03-18 10. **Occurred At · 100% confidence · current** Reported access-and-copying window begins: 2025-11-21 11. **Affected Organization · 100% confidence · current** Navigate360 system-data breach: Navigate360 12. **Resulted In · 100% confidence · current** Navigate360 system-data breach: South Carolina report listed 13. **Resulted In · 100% confidence · current** Navigate360 system-data breach: Reported access-and-copying window ends 14. **Occurred At · 100% confidence · current** Reported access-and-copying window ends: 2026-03-05