---
schema_version: "secwatch.filing_event.v1"
accession: "0001428336-24-000055"
form_type: "8-K"
ticker: "HQY"
cik: "0001428336"
company_name: "HEALTHEQUITY, INC."
filed_at: "2024-07-02T23:59:59+00:00"
generated_at: "2026-05-31T23:44:47.226633+00:00"
event_type: "cyber"
sentiment: "negative"
materiality_score: 0.65
calibrated_materiality_score: 0.65
confidence: "high"
source: SEC EDGAR
---

# HealthEquity discloses data breach via compromised business partner account; PII/PHI accessed

## Summary
- A third party compromised a business partner's account, accessing personally identifiable and protected health information of some members.
- Investigation concluded some information was transferred off the partner's systems; no malicious code found on HealthEquity systems.
- No interruption to systems, services, or business operations; company is notifying partners, clients, and affected members.
- Company expects to offer complimentary credit monitoring and identity restoration; holds adequate cybersecurity insurance.
- Company currently believes the incident will not have a material adverse effect on its business, operations, or financial results.

## SEC filing metadata
- accession: 0001428336-24-000055
- form_type: 8-K
- ticker: HQY
- cik: 0001428336
- company_name: HEALTHEQUITY, INC.
- filed_at: 2024-07-02T23:59:59+00:00
- event_type: cyber
- sentiment: negative
- materiality_score: 0.65
- calibrated_materiality_score: 0.65
- confidence: high
- sec_items: 8.01, 9.01
- EDGAR index: https://www.sec.gov/Archives/edgar/data/1428336/000142833624000055/0001428336-24-000055-index.htm
- EDGAR primary document: https://www.sec.gov/Archives/edgar/data/1428336/000142833624000055/hqy-20240702.htm

## Machine-readable alternates
- HTML: https://secwatch.observer/filing/0001428336-24-000055
- JSON: https://secwatch.observer/filing/0001428336-24-000055.json
- Plain text: https://secwatch.observer/filing/0001428336-24-000055.txt

This AI-assisted summary is a reading aid. Review the linked SEC EDGAR filing before relying on any specific claim.