HealthEquity, a major provider of medical savings accounts in the United States, has disclosed a significant data breach impacting the records of 4.3 million individuals. The breach was first detected on March 9, 2024, but was only confirmed on June 26 after an internal probe.
The unauthorized access involved sensitive health information and personal data. HealthEquity attributed the breach to attackers exploiting compromised credentials from one of the company’s partners to infiltrate an unprotected data repository separate from the primary systems.
/Reports, release notes, official announcements.