HealthEquity suffered a data breach affecting over four million individuals. Compromised data includes names, addresses, phone numbers, employee IDs, employer information, social security numbers, dependent information, and payment card details. Although not all records contained complete data sets, the breach's scale is considerable given HealthEquity's customer base of over 15 million accounts. The company has taken measures to enhance security and prevent future incidents, alongside offering identity theft protection services to the impacted customers.
TPRM report: https://scoringcyber.rankiteo.com/company/healthequity
"id": "hea002032225",
"linkid": "healthequity",
"type": "Breach",
"date": "7/2024",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"
{'affected_entities': [{'customers_affected': 'Over four million individuals',
'industry': 'Healthcare',
'name': 'HealthEquity',
'type': 'Company'}],
'data_breach': {'number_of_records_exposed': 'Over four million',
'personally_identifiable_information': ['names',
'addresses',
'phone numbers',
'employee IDs',
'employer information',
'social security '
'numbers',
'dependent '
'information'],
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['names',
'addresses',
'phone numbers',
'employee IDs',
'employer information',
'social security numbers',
'dependent information',
'payment card details']},
'description': 'HealthEquity suffered a data breach affecting over four '
'million individuals. Compromised data includes names, '
'addresses, phone numbers, employee IDs, employer information, '
'social security numbers, dependent information, and payment '
'card details. Although not all records contained complete '
"data sets, the breach's scale is considerable given "
"HealthEquity's customer base of over 15 million accounts. The "
'company has taken measures to enhance security and prevent '
'future incidents, alongside offering identity theft '
'protection services to the impacted customers.',
'impact': {'data_compromised': ['names',
'addresses',
'phone numbers',
'employee IDs',
'employer information',
'social security numbers',
'dependent information',
'payment card details'],
'identity_theft_risk': 'High',
'payment_information_risk': 'High'},
'response': {'remediation_measures': ['Enhanced security measures',
'Identity theft protection services']},
'title': 'HealthEquity Data Breach',
'type': 'Data Breach'}