HealthEquity, Inc. Data Breach Investigation

HealthEquity, Inc. is an administrator of Health Savings Accounts (“HSA”) and Flexible Spending Accounts (“FSA’) with more than 120,000 organizations and 14 million members using its services. In a July 2, 2024 Security Exchange Commission (“SEC”) filing, HealthEquity reported a data breach that occurred “earlier this year” which involved compromised credentials held by one of its third-party vendors. The types of compromised personally identifiable information (“PII”) and protected health information (“PHI”) were not disclosed in the filing; however, when their systems were breached in the fall and spring of 2018 compromised information included names, SSNs, HealthEquity member ID, and account type (e.g., HSA or FSA). According to the SEC filing, HealthEquity, Inc. is in the process of notifying its partners and clients, as well as identifying and notifying individual members whose information may have been involved. If you or someone you know receives a notification letter about the data breach and would like additional information about your legal rights, you can contact Goldenberg Schneider, LPA by calling 513-982-1569, sending an email to [email protected] or completing the “Contact Us” form to the right.