Legally reviewed by Jean Martin, Trial Attorney at Morgan & Morgan, on July 31, 2024.
The data privacy attorneys at Morgan & Morgan are investigating a data breach occurring at HealthEquity impacting more than 4.3 million people. HealthEquity has indicated that the stolen data includes names, addresses, phone numbers, Social Security numbers, and for some, prescription and diagnosis information.
Based in Utah, HealthEquity is a prominent health savings account (HSA) administrator, providing access to these accounts, COBRA benefits, and other workplace benefits for the employees of its customers. The data security incident occurred on March 9, HealthEquity received an alert about a potential incident on March 25, and it wasn’t until June 10 that HealthEquity was able to confirm that an authorized threat actor had access to this sensitive data. But for some unknown reason, HealthEquity will not be sending notices to those affected until August 9, 2024.
The attorneys at Morgan & Morgan have been recognized as industry leaders in the field of data privacy. We are investigating the breach at HealthEquity to get answers for those affected, especially answers as to why it took HealthEquity so long to notify consumers.
If you receive a data breach notice from HealthEquity, Morgan & Morgan is here to help. Please take our data privacy quiz to learn more and to see if you may have a case.