A major cyberattack on benefits administrator Navia leaked sensitive data for nearly 2.7 million Americans, including SSNs and health plan details.