Teollimi

HealthEquity data breach

Was I affected?

HealthEquity confirmed a breach affecting about 4.3 million people, exposing names, addresses, phone numbers and Social Security numbers. You may be affected if you had an HSA, FSA or other benefit account through HealthEquity (often via your employer) and received a notice in mid-2024.

HealthEquity breach facts
AnnouncedJul 2, 2024
When it happenedMarch 9, 2024 (confirmed June 26, 2024)
People affected4.3 million
Data exposedNames, Addresses, Phone numbers, Social Security numbers, Health insurance details, Payment card numbers and Other details
Through a vendorUnnamed partner (compromised vendor account)
StatusConfirmed by the company or a regulator filing

What happened

HSA and benefits administrator HealthEquity said an attacker used a compromised account belonging to a vendor to reach an online storage location outside its core systems. Its Maine filing put the count at 4.3 million people, with data such as names, addresses, phone numbers, Social Security numbers, employer and dependent details, benefit information and some payment card information. HealthEquity offered two years of credit monitoring.

What should I do?

  1. Freeze your credit for free at Equifax, Experian and TransUnion so no one can open new accounts in your name.
  2. Sign up for the free credit or identity monitoring offered in the notice letter before its enrollment deadline.
  3. Review your HSA/FSA transactions and payout settings for changes you didn't make.
  4. Request an IRS Identity Protection PIN so nobody can file a tax return with your Social Security number.
XRedditWhatsApp

Check the other services you use →

Sources