PEB program explains collective‑bargaining FSA benefit and notifies board of NAVIA data breach

Kelsey Pelle described the collective‑bargaining Flexible Spending Arrangement (CBA FSA) that awards a $300 employer contribution to eligible, union‑represented employees who meet income and enrollment criteria. Pelle said the contribution was added to Navia accounts in January, new recipients receive a debit card and the employer contribution does not count toward the IRS annual maximum election. She explained eligibility rules (PEB program enrollment, FTE status, income cap of $68,004 as of 11/01/2025, and non‑CDHP enrollment rules) and that Navia issued welcome letters and cards to recipients.

Later in the meeting, staff briefed the board on a NAVIA security incident. Dave Eismay said NAVIA had reported unauthorized access across its book of business (about 2.7 million records) and that HCA‑related accounts totaled about 35,600 records (roughly 27,000 PEB members). Exposed fields varied by account and can include name, Social Security number (except COFA Islander accounts), date of birth, address and NAVIA ID; NAVIA said it did not see claims or bank account data are and it fixed the vulnerability. NAVIA will begin individual notifications and provide one year of credit monitoring; HCA plans a security review and will limit data shared with vendors going forward.

"Participants are able to use Navia's website to manage their FSA benefits," Kelsey said. "Eligible CBA FSA recipients are not required to actively enroll in the FSA to receive this $300." Dave added that the breach notifications to impacted members will begin next week and include tailored information about which specific data elements were accessed.