Skip to content

HealthEquity

3 breaches4.5M affected in allHealthcarehealthequity.com

BreachAffected
Compromised partner account exposes data of 4.3 million HealthEquity usersJul 2, 20242 years agoVendor breach4.3M
Disclosed Jun 12, 2018Jun 12, 20188 years agoPhishing166K
Disclosed Jan 25, 2016Jan 25, 201610 years agoUnknown
About

Every breach here links to its sources and official notices. Across fru.dev: lawsuits, incidents and outages.

  • 2026-09-25 · HealthEquity, 2018-06-12 · disclosed: 2018-06-12
  • 2026-09-25 · HealthEquity, 2018-06-12 · records_basis: hhs
  • 2026-09-25 · HealthEquity, 2018-06-12 · records: 165800
  • 2026-09-25 · HealthEquity, 2018-06-12 · summary: HealthEquity, the covered entity (CE), reported that several employees were the victims of an email phishing attack. The breached accounts contained the protected health information (PHI) of 165,800 individuals. The PHI involved included na
  • 2026-09-25 · HealthEquity, 2018-06-12 · data_types: ["names","ssn","health","insurance"]
  • 2026-09-25 · HealthEquity, 2018-06-12 · disclosed: 2018-06-13
  • 2026-09-25 · HealthEquity, 2024-07-02 · source: https://ago.vermont.gov/document/2024-07-26-healthequity-data-breach-notice-consumers
  • 2026-09-25 · HealthEquity, 2024-07-02 · attack: third-party
  • 2026-09-25 · HealthEquity, 2024-07-02 · data_types: ["names","health","addresses","phone","ssn","employment","payment-card"]
  • 2026-09-25 · HealthEquity, 2024-07-02 · records_basis: organization
  • 2026-09-25 · HealthEquity, 2024-07-02 · records: 4300000
  • 2026-09-25 · HealthEquity, 2024-07-02 · disclosed: 2024-07-02
  • 2026-09-25 · HealthEquity, 2024-07-02 · summary: HealthEquity said a business partner's compromised user account was used to access an unstructured data repository outside its core network containing members' personal and health information. It notified about 4.3 million people, with data
  • 2026-09-25 · HealthEquity, 2024-07-02 · title: Compromised partner account exposes data of 4.3 million HealthEquity users
  • 2026-09-25 · HealthEquity · domain: healthequity.com
  • 2026-09-25 · HealthEquity, 2024-07-02 · data_types: ["names","health"]
  • 2026-09-25 · HealthEquity, 2024-07-02 · records_basis: hhs
  • 2026-09-25 · HealthEquity, 2024-07-02 · records: 1549
  • 2026-09-25 · HealthEquity, 2018-06-12 · attack: phishing
  • 2026-09-25 · HealthEquity, 2018-06-12 · discovered: 2018-10-05
  • 2026-09-25 · HealthEquity, 2024-07-02 · attack: hacking
  • 2026-09-25 · HealthEquity, 2024-07-02 · discovered: 2024-03-25
  • 2026-09-25 · HealthEquity, 2016-01-25 · added
  • 2026-09-25 · HealthEquity, 2018-06-12 · added
  • 2026-09-25 · HealthEquity, 2024-07-02 · disclosed: 2024-07-26
  • 2026-09-25 · HealthEquity, 2024-07-02 · disclosed: 2025-03-21
  • 2026-09-25 · HealthEquity, 2024-07-02 · disclosed: 2025-04-09
  • 2026-09-25 · HealthEquity, 2024-07-02 · disclosed: 2025-04-17
  • 2026-09-25 · HealthEquity, 2024-07-02 · disclosed: 2025-05-13
  • 2026-09-25 · HealthEquity, 2024-07-02 · disclosed: 2025-05-15

New breaches by email

Wednesdays, only in weeks with newly disclosed breaches, the largest first.

Double opt-in. Unsubscribe any time.