UnknownHigh

HEALTHEQUITY, INC.

bd_5de1919bf0e7e946 · schema v1 · pii pii-v1

Severity

High

Discovered

—

Filed

Jul 29, 2024

To disclose

—

Affected · nationwide

4,300,00098,857 in this filing

Linked

29 filings

Confidence

95%

Full breach record for HEALTHEQUITY, INC. →9 incidents on file

Health Equity Inc reported a data breach to the Indiana Attorney General. The breach occurred on 2024-03-13 and was reported on 2024-07-29. 98,857 Indiana residents were affected. 4,300,000 individuals affected in total.

J jump to incidentP pin to compareR raw source

Leak gap clock✗ Leak >180d

⚠ no discovery dateNo discovery date was extracted, so no notification clock can be evaluated.

Incident timeline

Mar 13, 2024

Begins

Jul 29, 2024

Filed

This filing is one of 29 about the same incident.View merged incident

A leak claim by cl0p about this victim predates this filing by 410 days.View originating leak claim

Linked disclosures

Why this link?

Regulatory filings (10) · sorted by filing gap

New Hampshire State AGbd_28461d0ca18db56c2025-05-09 · +284dVerified
California State AGbd_7e9b16c89d34dab02025-05-13 · +288dVerified
New Hampshire State AGbd_9a2a12c83e6cb7aa2025-05-13 · +288dVerified
New Hampshire State AGbd_21d2076c91f8736a2025-05-15 · +290dVerified

Show 6 more filings ↓up to 298d gap

California State AGbd_494d1212995525832025-05-15 · +290dVerified
New Hampshire State AGbd_2266c3f182119ec42025-05-16 · +291dVerified
California State AGbd_6de5fe3402737e2c2025-05-16 · +291dVerified
Massachusetts State AGbd_6379ee1c193eb9472025-05-19 · +294dVerified
New Hampshire State AGbd_7db48af763cdb9302025-05-19 · +294dVerified
Massachusetts State AGbd_ae96121ac373c5d22025-05-23 · +298dVerified

Showing first 10 of 28 linked disclosures.

Name: HEALTHEQUITY, INC.
norm: healthequity
Domain: healthequity.com

Name: HEALTHEQUITY, INC.
norm: healthequity
Domain: healthequity.com

Discovered: —
Breach occurred: Mar 13, 2024
Materiality determined: —
Notification sent: —
Affected individuals: 4,300,000state + nationwide
Data types: —
Attack vector: Unknown

Compliance flags: Leak >180d
Discovery-date grounding: no discovery dateNo discovery date was extracted, so no notification clock can be evaluated.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 11 filings · 4 states

View merged incident ↗

Indiana State AGJul 29 · first · this page

New Hampshire State AG+284d

California State AG+288d

New Hampshire State AG+288d

New Hampshire State AG+290d

California State AG+290d

New Hampshire State AG+291d

California State AG+291d

Massachusetts State AG+294d

New Hampshire State AG+294d

Massachusetts State AG+298d

Pattern: first filing Jul 29 (IN), last May 23 (MA) — a 298-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Cascade drawn from the first 10 linked disclosures of 28 — the full spread may be wider.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.in.gov/attorneygeneral/consumer-protection-division/id-theft-prevention/security-breaches/
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jul 29, 2024
Raw hash: a8d387119800cea20a2324871bceab732a8eed8ef85cf5da2324445fe4d25d82

Linked disclosures

Regulatory filings (10) · sorted by filing gap

Reporting entityHEALTHEQUITY, INC.

Victim entityHEALTHEQUITY, INC.

IncidentUnknown

ComplianceLeak >180d

Extraction provenanceno artifact recorded

Source provenancewww.in.gov