HEALTHEQUITY, INC.
33 disclosures across 13 jurisdictions · 2024-03-01 → 2025-05-23. Severity score: 11 across 6 incidents (max per incident: crit=4 high=3 med=2 low=1; per-filing sum: 71).
1825-day window · this entity as victim
apparent from filed dates · see trail
of 12 clock verdicts
max per incident · per-filing sum: 71
Sector context · Finance
- This entity:
- 8.3% on-time (n=12 clock verdicts)
- Sector cohort:
- 25.6% on-time (n=2,331 clock verdicts)
Cohort: 6,597 filings from 2,123 organisations carrying NAICS 52 on the filing itself, same 1825-day window; merged entities counted once. Both percentages count clock verdicts through the same registry — a filing with no evaluable clock is excluded from both rather than counted as on time.
Compliance timing by regulator
Notice timing computed from the dates recorded in each filing — an indicative estimate from an automated clock, not a legal determination. Click any chip for this entity's source filings.
- HIPAA0 on-time · 0 late · 2 informational · 2
- California0 on-time · 7 late · 7
- Maine0 on-time · 1 review · 1 late · 1 informational · 3
- Washington0 on-time · 1 late · 1
- Massachusetts0 on-time · 0 late · 1 informational · 1
- Vermont0 on-time · 1 late · 1
- Oregon1 on-time · 0 late · 1
- South Carolina0 on-time · 0 late · 1 informational · 1
- Leak gap29 leak preceded filing
us-mt — no notification-clock framework implemented for this jurisdiction
Discovery dates behind these clocks: 3 ag web form · 8 letter-grounded · 4 unattributed. Only a date the notification letter itself states is fully defensible; a date derived from another field makes the verdict indicative.
Regulators holding filings from this entity
Every regulator that has received a visible filing naming this entity, all time — filings first.
- New Hampshire State AG (12)
- California State AG (9)
- Massachusetts State AG (6)
- HHS OCR (4)
- Montana State AG (3)
- Indiana State AG (2)
- Oregon State AG (2)
- Washington State AG (2)
- SEC 8-K (1)
- Illinois State AG (1)
- Maine State AG (1)
- South Carolina State AG (1)
- Vermont State AG (1)
SEC-registered (CIK 0001428336). SEC cyber filings on record in this corpus: 1. Materiality under Item 1.05 is the registrant's own determination; the absence of a filing is a fact about this corpus, not a finding about any obligation.
Breach History (5-Year Lookback)
Historical incident recurrence, cumulative exposure, and per-jurisdiction compliance record
within lookback window
late notice filings
median days between incidents
Per-jurisdiction compliance record
| Jurisdiction | On-time | Late | Rate |
|---|---|---|---|
| us-ca | 0 | 7 | 0% |
| us-federal | 0 | 0 | — |
| us-il | 0 | 0 | — |
| us-in | 0 | 0 | — |
| us-ma | 0 | 0 | — |
| us-me | 0 | 2 | 0% |
| us-nh | 0 | 0 | — |
| us-or | 1 | 0 | 100% |
| us-sc | 0 | 0 | — |
| us-ut | 0 | 0 | — |
| us-vt | 0 | 1 | 0% |
| us-wa | 0 | 1 | 0% |
Cumulative data type exposure
Disclosure timeline
Most-recent 100 filings. Click a row to open the disclosure detail.
| Filed | Source | Jurisdiction | Severity | Affected | Clocks missed |
|---|---|---|---|---|---|
| 2025-05-23 | state_ag | us-ma | Low | 253state | |
| 2025-05-19 | state_ag | us-ma | Medium | 61.4Kstate | |
| 2025-05-19 | state_ag | us-nh | Low | 2state | |
| 2025-05-16 | state_ag | us-nh | Low | 108state | |
| 2025-05-16 | state_ag | us-ca | Medium | — | CA 60-day late |
| 2025-05-15 | state_ag | us-nh | High | 10.5Kstate | |
| 2025-05-15 | state_ag | us-ca | Medium | — | CA 60-day late |
| 2025-05-13 | state_ag | us-ca | Medium | — | CA 60-day late |
| 2025-05-13 | state_ag | us-nh | Low | 638state | |
| 2025-05-09 | state_ag | us-nh | High | 1.1Kstate | |
| 2025-04-25 | state_ag | us-nh | Medium | 13.2Kstate | |
| 2025-04-17 | state_ag | us-ca | Medium | — | CA 60-day late |
| 2025-04-17 | state_ag | us-nh | Low | 105state | |
| 2025-04-16 | state_ag | us-nh | Medium | 3.2Kstate | |
| 2025-04-09 | state_ag | us-ca | Medium | — | CA 60-day late |
| 2025-04-09 | state_ag | us-nh | High | 2.6Kstate | |
| 2025-03-24 | state_ag | us-nh | Medium | — | |
| 2025-03-21 | state_ag | us-ca | Medium | — | CA 60-day late |
| 2025-01-27 | state_ag | us-ma | Low | 2state | |
| 2024-12-20 | ocr | us-ut | Medium | 1.5K | |
| 2024-10-10 | state_ag | us-in | Low | 2 | |
| 2024-08-09 | ocr | us-ut | High | 4.3M | |
| 2024-07-29 | state_ag | us-in | High | 4.3M | |
| 2024-07-27 | state_ag | us-ma | High | 81.2Kstate | |
| 2024-07-26 | state_ag | us-me | Critical | 4.3M | ME AG >90dME resident >60d· discovery date: unattributed |
| 2024-07-26 | state_ag | us-or | High | 4.3M | |
| 2024-07-26 | state_ag | us-sc | Critical | 110.2Kstate | |
| 2024-07-26 | state_ag | us-vt | Medium | — | VT AG >45 bday· discovery date: unattributed |
| 2024-07-26 | state_ag | us-mt | High | 17.6Kstate | |
| 2024-07-26 | state_ag | us-ca | Medium | — | CA 60-day late |
| 2024-07-26 | state_ag | us-wa | Critical | 102.1Kstate | WA AG >90d· discovery date: ag web form |
| 2024-07-02 | sec_8k | us-federal | Low | — | |
| 2024-03-01 | state_ag | us-il | Low | — |