HealthEquity experienced a data breach that impacted around 4.3 million individuals. According to the data breach notice filed with the Maine Attorney General’s office, the breach occurred on March 9, 2024 and was discovered on June 26, 2024. 

“Unfortunately, the theft of PHI can be very detrimental to those impacted as there is a lot of sensitive information, including social security numbers and, in many cases, information about procedures or ailments that may be embarrassing. It is also information that can be used for subsequent social engineering attacks. By referencing a procedure or test that an individual might think is private and known only to medical professionals, bad actors can more easily build trust with potential victims.