HealthEquity, Inc. reported to HHS on 2018-06-12 a hacking incident affecting 16,000 individuals. The breach resulted from an email phishing scheme targeting employees. The compromised Protected Health Information (PHI) included names, Social Security numbers, claims information, insurance information, employer information, financial information, and treatment information. In response, the company sanctioned the responsible employee, implemented additional security safeguards, and provided further staff training.
Affected (this filing): 16,000