HEALTHEQUITY, INC.

HealthEquity, Inc. reported a data breach affecting HSA/FSA customers. On March 25, 2024, the company detected a systems anomaly. Investigation revealed that a third-party vendor's user accounts were compromised, allowing unauthorized access to an online data storage location containing personally identifiable information (PII) and protected health information (PHI), including names, addresses, SSNs, and payment card info (but not numbers). The breach occurred on March 9, 2024. HealthEquity disabled compromised accounts, reset passwords, and offered two years of credit monitoring.