HealthEquity data breach overview:
- Who: Healthcare benefits administrator HealthEquity said it suffered a data breach that may have impacted 4.3 million customers.
- Why: HealthEquity attributed the data breach to a vendor’s user accounts becoming compromised.
- Where: The HealthEquity data breach may affect the company’s customers nationwide.
Healthcare benefits administrator HealthEquity is set to notify 4.3 million of its customers that they may have been impacted by a March data breach.
In a notice filed with the Maine attorney general’s office, HealthEquity said it discovered the data breach in late June and that it expects to notify potentially affected customers Aug. 9.
HealthEquity said the data breach potentially disclosed protected health information and/or personally identifiable information stored in an “unstructured data repository” outside of its core systems, according to a sample notification letter to be sent out to HeatlhEquity customers in Maine on Aug. 9.
“On June 26, 2024, after validating the data, we unfortunately determined that some of your personal information was involved,” the company said in the sample letter.
The potentially exposed data “primarily consisted” of sign-up information for accounts and benefits administered by the company, according to the sample letter.
HealthEquity says data breach may have exposed names, phone numbers, other info
HealthEquity attributed the data breach to a vendor’s user accounts becoming compromised, which allowed an unauthorized party to access a “limited amount” of data being stored outside of its core systems.
Information potentially exposed in the data breach includes names, addresses, phone numbers, employee IDs, employer names, social security numbers, dependent information and payment card information, according to HealthEquity.
The Utah-based company is offering two years of free credit identity monitoring, insurance and restoration services through Equifax to customers potentially affected by the data breach.
HealthEquity also encouraged customers to “carefully review financial statements, credit reports and other accounts to ensure that all account activity is valid.”
Anyone with more questions about the data breach can contact HealthEquity by telephone at 888-244-3079.
The data breach incident is the latest to make waves, with consumers recently filing a number of class action lawsuits against companies they argue failed to prevent data breaches by having proper security safeguards in place.
The data breach-related class action lawsuits were filed against Intuit, Ticketmaster, Live Nation, AT&T, Evolve Bank, CDK Global, Advance Auto Parts, Truist and Panera Bread.
Were you affected by the HealthEquity data breach? Let us know in the comments.
Don’t Miss Out!
Check out our list of Class Action Lawsuits and Class Action Settlements you may qualify to join!
Read About More Class Action Lawsuits & Class Action Settlements:
19 thoughts onHealthEquity data breach impacts 4.3M customers
My health equity account was hacked due to a data breach. Hacker changed the email and password associated with my account which resulted in an HSA investigation and I had to pay health bills out of pocket with no access to my HSA funds. Took months to get it cleared up. Still waiting for the money to be transferred out and they want to charge me $25 if I close the account due to their negligence
I received a letter, please add me
Healthequity data breach notice received. When I called them I had just the day before had 900 dollars fraudulently charged to my debit card account. They offered identity theft insurance and credit monitoring for a period of time. When I told them about the fraudulent charges I had already been subjected to they claimed that those were ineligible to be covered by my insurance because I didn’t have the coverage the day they happened. It’s a load of s#%$ because the breach had happened months earlier and I was only now being notified. I should have been made aware much sooner so the insurance would have covered my loss.
I received my letter from helbec reading today.Statement that not only I but my wife and our minor children.Had their data leaked in his breach.Please add me thank you
I have received a letter that my info could have been compromised! Please add me