Something doesn't look right?

HealthEquity Data Breach Jul 2024

No known CVEs used

Subscribe for weekly updates

Security Incident Summary

Severity Score

Significant

Organization

HealthEquity

Threat Actor

Unknown

Actor Type

Unknown

Type of Breach

3rd Party Compromise

News Timeline

Jul 30, 2024

Additional Report

HealthEquity Data Breach Compromises Customer Information itsecurityguru.org - The HealthEquity data breach, detected on March 25, 2024, was traced back to abnormal activity on a business partner's device, leading to unauthorized access and exfiltration of data from its SharePoi...
Show more

Additional Report

Cyberattackers Accessed HealthEquity Customer Info via Third Party darkreading.com - The initial access to HealthEquity's systems occurred on March 9, with a systems anomaly alert surfacing on March 25, indicating that the attackers went unnoticed for approximately two weeks. Followin...
Show more

Jul 29, 2024

Additional Disclosure

4.3 Million Impacted by HealthEquity Data Breach securityweek.com - On March 25, HealthEquity identified unauthorized access and potential disclosure of personal health information and personally identifiable information stored in an unstructured data repository due t...
Show more

Additional Report

HealthEquity says data breach impacts 4.3 million people bleepingcomputer.com - An investigation revealed that the data breach on March 9, 2024, involving the theft of sensitive health data, was executed via a partner's compromised credentials. HealthEquity responded by terminati...
Show more

Additional Report

Intruders at HealthEquity rifled through storage, stole 4.3M people's data go.theregister.com - The breach investigation revealed that compromised vendor user accounts granted unauthorized parties access to an online data storage location, outside the core systems. Immediate remedial actions inc...
Show more

Jul 04, 2024

Initial Disclosure

HealthEquity data breach exposes protected health information bleepingcomputer.com - HealthEquity discovered that a partner's account was compromised, allowing unauthorized access to its systems and resulting in the exfiltration of sensitive health data and personally identifiable inf...
Show more

3rd party compromise

SEC Filing

Jul 03, 2024

Reports of being an Isolated Incident

HealthEquity says data breach is an ‘isolated incident’ techcrunch.com - HealthEquity revealed that a business partner's compromised account led to unauthorized access to some of HealthEquity's SharePoint data, containing protected health information of customers, detected...
Show more

Organization Details

Organization Size

3000

HQ Location

Draper, Utah

Industry

Healthcare

Security Stack used by HealthEquity at time of breach (best approximation) Why?

Network Security

VPN/SASE

IDS/IPS

Endpoint Security

EDR

MDM

Identity Management

SSO / MFA

IGA

Application Security

WAF

SCA

Cloud Security

CASB

CWPP

SIEM / Threat Intel

SIEM

TIP

Not right? Contribute more accurate data

What is HealthEquity?

HealthEquity, Inc. is a leading provider of health savings accounts (HSAs) and other consumer-directed benefits like health reimbursement arrangements (HRAs) and flexible spending accounts (FSAs). Founded in 2002, the company focuses on empowering consumers to save for their healthcare needs and max...
Show more

Learn more about recent incidents

9 / 10

Okta Oct, 2023

No known CVEs used

Subscribe for weekly updates

Security Incident Summary

Severity Score

Insignificant

Organization

Threat Actor

Actor Type

Type of Breach

Organization Details

Organization Size

HQ Location

Industry