cyber
confidence high
sentiment negative
materiality 0.65
HealthEquity discloses data breach via compromised business partner account; PII/PHI accessed
HEALTHEQUITY, INC.
- A third party compromised a business partner's account, accessing personally identifiable and protected health information of some members.
- Investigation concluded some information was transferred off the partner's systems; no malicious code found on HealthEquity systems.
- No interruption to systems, services, or business operations; company is notifying partners, clients, and affected members.
- Company expects to offer complimentary credit monitoring and identity restoration; holds adequate cybersecurity insurance.
- Company currently believes the incident will not have a material adverse effect on its business, operations, or financial results.