HealthEquity data breach impacts 4.3M customers

HealthEquity data breach overview: 

• Who: Healthcare benefits administrator HealthEquity said it suffered a data breach that may have impacted 4.3 million customers. 
• Why: HealthEquity attributed the data breach to a vendor’s user accounts becoming compromised.
• Where: The HealthEquity data breach may affect the company’s customers nationwide. 

Healthcare benefits administrator HealthEquity is set to notify 4.3 million of its customers that they may have been impacted by a March data breach. 

In a notice filed with the Maine attorney general’s office, HealthEquity said it discovered the data breach in late June and that it expects to notify potentially affected customers Aug. 9. 

HealthEquity said the data breach potentially disclosed protected health information and/or personally identifiable information stored in an “unstructured data repository” outside of its core systems, according to a sample notification letter to be sent out to HeatlhEquity customers in Maine on Aug. 9.

“On June 26, 2024, after validating the data, we unfortunately determined that some of your personal information was involved,” the company said in the sample letter. 

The potentially exposed data “primarily consisted” of sign-up information for accounts and benefits administered by the company, according to the sample letter. 

HealthEquity says data breach may have exposed names, phone numbers, other info

HealthEquity attributed the data breach to a vendor’s user accounts becoming compromised, which allowed an unauthorized party to access a “limited amount” of data being stored outside of its core systems. 

Information potentially exposed in the data breach includes names, addresses, phone numbers, employee IDs, employer names, social security numbers, dependent information and payment card information, according to HealthEquity. 

The Utah-based company is offering two years of free credit identity monitoring, insurance and restoration services through Equifax to customers potentially affected by the data breach. 

HealthEquity also encouraged customers to “carefully review financial statements, credit reports and other accounts to ensure that all account activity is valid.”

Anyone with more questions about the data breach can contact HealthEquity by telephone at 888-244-3079. 

The data breach incident is the latest to make waves, with consumers recently filing a number of class action lawsuits against companies they argue failed to prevent data breaches by having proper security safeguards in place. 

The data breach-related class action lawsuits were filed against Intuit, Ticketmaster, Live Nation, AT&T, Evolve Bank, CDK Global, Advance Auto Parts, Truist and Panera Bread. 

Were you affected by the HealthEquity data breach? Let us know in the comments.

Read About More Class Action Lawsuits & Class Action Settlements:

• Consumers file AT&T class actions following massive data breach
• Trello data breach affects 15M users’ email addresses
• Disney Slack message data breach allegedly contains 1.1TB of data
• Ticketmaster class action claims massive data breach impacts 500M+