HEALTHEQUITY, INC.

HealthEquity, Inc. reported a data security incident where a vendor's user accounts were compromised, leading to unauthorized access to protected health information and personally identifiable information (including SSNs and payment card data) stored in an unstructured data repository. The breach occurred on March 9, 2024, and was discovered on March 25, 2024. HealthEquity engaged third-party experts, disabled compromised accounts, and offered two years of credit monitoring to affected individuals.