HealthEquity Inc.

The Washington State Office of the Attorney General reported a data breach involving HealthEquity Inc. on November 15, 2018. The breach, which occurred between September 4, 2018, and October 5, 2018, was caused by a cyberattack (phishing) and affected approximately 27,175 individuals, potentially exposing names, Social Security Numbers, and other information.

Source: https://www.atg.wa.gov/data-breach-notifications | https://data.wa.gov/resource/sb4j-ca4h.json?id=10596

TPRM report: https://www.rankiteo.com/company/healthequity

"id": "hea745072525",
"linkid": "healthequity",
"type": "Cyber Attack",
"date": "9/2018",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'customers_affected': 27175,
                        'industry': 'Healthcare',
                        'name': 'HealthEquity Inc.',
                        'type': 'Company'}],
 'attack_vector': 'Phishing',
 'data_breach': {'number_of_records_exposed': 27175,
                 'personally_identifiable_information': True,
                 'type_of_data_compromised': ['Names',
                                              'Social Security Numbers',
                                              'Other information']},
 'date_detected': '2018-10-05',
 'date_publicly_disclosed': '2018-11-15',
 'description': 'The Washington State Office of the Attorney General reported '
                'a data breach involving HealthEquity Inc. on November 15, '
                '2018. The breach, which occurred between September 4, 2018, '
                'and October 5, 2018, was caused by a cyberattack (phishing) '
                'and affected approximately 27,175 individuals, potentially '
                'exposing names, Social Security Numbers, and other '
                'information.',
 'impact': {'data_compromised': ['Names',
                                 'Social Security Numbers',
                                 'Other information']},
 'references': [{'date_accessed': '2018-11-15',
                 'source': 'Washington State Office of the Attorney General'}],
 'title': 'Data Breach at HealthEquity Inc.',
 'type': 'Data Breach'}