Navient Reports Cybersecurity Incident at Service Provider

Navient (NAVI) said in a regulatory filing late Thursday that on June 8 it was informed of a cybersecurity incident involving a third-party law firm that provides services to the company. The incident involved a ransomware attack that affected some of the law firm's information systems, Navient said, adding an unauthorized actor accessed company-related data, including borrower information like clients names, date of birth, addresses and Social Security numbers. Navient said it has launched an investigation and is notifying affected individuals as well as regulators. The incident was limited to the law firm's systems, Navient said, adding it does not believe the incident will have a material impact on its financial condition or results.