HealthEquity data breach exposes protected health information

Share:

Healthcare fintech firm HealthEquity is warning that it suffered a data breach after a partner’s account was compromised and used to access the company’s systems to steal protected health information.

The company says it detected the compromise after detecting ‘anomalous behavior’ from a partner’s personal device and launched an investigation into the incident.

The investigation revealed that the partner had been compromised by hackers who leveraged the hijacked account to gain unauthorized access to HealthEquity’s systems and, later, exfiltrate sensitive health data.

“The investigation concluded that the Partner’s user account had been compromised by an unauthorized third party, who used that account to access information,” reads the SEC filing.

“The accessed information included some personally identifiable information, which in some cases is considered protected health information, pertaining to certain of our members.”

“The investigation further concluded that some information was subsequently transferred off the Partner’s systems.”

HealthEquity specializes in providing health savings account (HSA) services and other consumer-directed benefits solutions, including flexible spending accounts (FSAs), health reimbursement arrangements (HRAs), and 401(k) retirement plans.

It is one of the largest HSA custodians in the United States, managing millions of HSA, FSA, HRA, and other benefit accounts, and working with numerous employers and health plans.

The exact impact and number of people affected by the security incident haven’t been disclosed, though HealthEquity says it has begun notifying impacted individuals.

The company also promised to offer complimentary credit monitoring and identity restoration services to mitigate the risk for exposed people.

HealthEquity’s internal investigation has not produced evidence that malware was dropped on its systems, and there have been no technical interruptions. All business operations and services remain fully available.

The company is currently evaluating the incident’s impact and the cost of its response efforts but noted that it does not believe the incident will have a material effect on its business or financial results.

Leave a Comment

Your email address will not be published. Required fields are marked *

loader-image
London, GB
1:52 am, Feb 12, 2025
weather icon 4°C
L: 3° | H: 5°
overcast clouds
Humidity: 91 %
Pressure: 1019 mb
Wind: 5 mph NNW
Wind Gust: 0 mph
UV Index: 0
Precipitation: 0 mm
Clouds: 100%
Rain Chance: 0%
Visibility: 7 km
Sunrise: 7:20 am
Sunset: 5:09 pm
DailyHourly
Daily ForecastHourly Forecast
Today 9:00 pm
weather icon
3° | 5°°C 0 mm 0% 5 mph 91 % 1021 mb 0 mm/h
Tomorrow 9:00 pm
weather icon
3° | 6°°C 0 mm 0% 9 mph 87 % 1025 mb 0 mm/h
Fri Feb 14 9:00 pm
weather icon
1° | 6°°C 0 mm 0% 8 mph 81 % 1026 mb 0 mm/h
Sat Feb 15 9:00 pm
weather icon
1° | 6°°C 0 mm 0% 8 mph 85 % 1024 mb 0 mm/h
Sun Feb 16 9:00 pm
weather icon
4° | 8°°C 1 mm 100% 6 mph 95 % 1019 mb 0 mm/h
Today 3:00 am
weather icon
4° | 4°°C 0 mm 0% 3 mph 91 % 1018 mb 0 mm/h
Today 6:00 am
weather icon
4° | 4°°C 0 mm 0% 3 mph 85 % 1018 mb 0 mm/h
Today 9:00 am
weather icon
4° | 4°°C 0 mm 0% 3 mph 81 % 1019 mb 0 mm/h
Today 12:00 pm
weather icon
5° | 5°°C 0 mm 0% 3 mph 68 % 1019 mb 0 mm/h
Today 3:00 pm
weather icon
6° | 6°°C 0 mm 0% 3 mph 71 % 1019 mb 0 mm/h
Today 6:00 pm
weather icon
5° | 5°°C 0 mm 0% 5 mph 76 % 1020 mb 0 mm/h
Today 9:00 pm
weather icon
5° | 5°°C 0 mm 0% 5 mph 78 % 1021 mb 0 mm/h
Tomorrow 12:00 am
weather icon
3° | 3°°C 0 mm 0% 4 mph 87 % 1022 mb 0 mm/h
Name Price24H (%)
Bitcoin(BTC)
€92,652.97
-2.09%
Ethereum(ETH)
€2,519.23
-3.44%
Tether(USDT)
€0.96
-0.04%
XRP(XRP)
€2.33
-2.01%
Solana(SOL)
€190.18
-3.50%
USDC(USDC)
€0.97
-0.01%
Dogecoin(DOGE)
€0.244066
-2.23%
Shiba Inu(SHIB)
€0.000015
-2.17%
Pepe(PEPE)
€0.000010
-3.33%
Scroll to Top