HEALTHEQUITY, INC.
bd_fcf0d383c0de759d · schema v1 · pii pii-v1
Full breach record for HEALTHEQUITY, INC. →9 incidents on fileSupplemental notice filed by counsel for HealthEquity, Inc. with the New Hampshire Attorney General regarding a prior data event. The filing attributes 3,229 impacted New Hampshire residents to a Covered Entity (Anthem). HealthEquity acts as a HIPAA Business Associate. No new individuals are reported; this reflects attribution of previously noticed individuals.
J jump to incidentP pin to compareR raw source
Incident timeline — partial
? — ?
Breach window unknown
Apr 16, 2025
Filed
—
Corroborated · see linked filings
Compliance clocks stay unassessable until a regulatory filing lands. Dashed segments fill in automatically when corroboration arrives.
Linked disclosures
Why this link?Regulatory filings (10) · sorted by filing gap
- New Hampshire State AGbd_28461d0ca18db56c2025-05-09 · +23dVerified
- California State AGbd_7e9b16c89d34dab02025-05-13 · +27dVerified
- New Hampshire State AGbd_9a2a12c83e6cb7aa2025-05-13 · +27dVerified
- New Hampshire State AGbd_21d2076c91f8736a2025-05-15 · +29dVerified
Show 6 more filings ↓Show fewer ↑up to 37d gap
- California State AGbd_494d1212995525832025-05-15 · +29dVerified
- New Hampshire State AGbd_2266c3f182119ec42025-05-16 · +30dVerified
- California State AGbd_6de5fe3402737e2c2025-05-16 · +30dVerified
- Massachusetts State AGbd_6379ee1c193eb9472025-05-19 · +33dVerified
- New Hampshire State AGbd_7db48af763cdb9302025-05-19 · +33dVerified
- Massachusetts State AGbd_ae96121ac373c5d22025-05-23 · +37dVerified
Showing first 10 of 28 linked disclosures.
Filing propagation · 11 filings · 3 states
View merged incident ↗Pattern: first filing Apr 16 (NH), last May 23 (MA) — a 37-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?
Cascade drawn from the first 10 linked disclosures of 28 — the full spread may be wider.
Evidence ladder
Attacker assertion only. Establishes: claim date, group, alleged victim.
Unlocks: incident narrative, operational impact. Still no compliance clock.
Unlocks: discovery date, data types, affected count, compliance clock.
Unlocks: materiality, stated response, full audit trail. Ceiling removed.