HackingIDENTITY_BASICMedium
HEALTHEQUITY, INC.
bd_3ad316c6fe8b921c · schema v1 · pii pii-v1
Full breach record for HEALTHEQUITY, INC. →HealthEquity, Inc. experienced an external system breach on March 9, 2024, which was discovered on June 26, 2024. The breach affected 13,480 Maine residents. The company is offering two years of complimentary credit and identity monitoring services through Equifax to those affected.
Leak gap clock✗ Leak >180d4 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 6 about the same incident.View merged incident
A leak claim by cl0p about this victim predates this filing by 407 days.View originating leak claim
Linked disclosures
Why this link?Ransomware claims (1)
- bd_6b441c84e03e4bf6Leak Sitecl0pfiled 2023-06-15(407d gap)Verified
Regulatory filings (4) · sorted by filing gap
- bd_40e275097d04739aOregon State AGfiled 2024-07-26Verified
- bd_7caea854c6066af0Montana State AGfiled 2024-07-26Verified
- bd_e60b7bd89f1fbdd3Washington State AGfiled 2024-07-26Verified
- bd_7e9b16c89d34dab0California State AGfiled 2025-05-13(291d gap)Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/2ec3e314-5731-49d0-a937-6dc22c6b24f3.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jul 26, 2024
- Raw hash
- 43d39e3639b3b429bfbd69af40846d399927d1e4af1b5b6be67003f35880d6b9
Reporting entity
- Name
- HEALTHEQUITY, INC.norm: healthequity
- Domain
- healthequity.com
Victim entity
- Name
- HEALTHEQUITY, INC.norm: healthequity
- Domain
- healthequity.com
Incident
- Discovered
- Jun 26, 2024
- Materiality determined
- —
- Notification sent
- Aug 9, 2024
- Affected individuals
- 13,480
- Data types
- IDENTITY_BASIC
- Attack vector
- Unauthorized Access
Compliance
- Time to disclose
- 4 weeks(30 days from discovery to filing)
- Compliance flags
- Leak >180dME AG ≤30d · 30d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Jun 26, 2024→ Filed with AG: Jul 26, 202430d 30 days ME AG ≤30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.