A major data breach has affected millions of Americans, potentially putting their personal information at risk.
Health Equity, a Utah-based company that manages health savings accounts (HSAs), has confirmed a security incident that exposed the sensitive data of 4.3 million customers.
What Data Was Stolen?
The stolen data may include:
- Names
- Addresses
- Phone numbers
- Employee IDs
- Employer names
- Social Security numbers
- Dependent information
- Payment card information
Health Equity emphasizes that not all of this data was exposed for every customer.
How Did It Happen?
The breach occurred on March 9th, 2024, but Health Equity didn’t become aware of the issue until March 25th. An investigation revealed that a vendor’s user accounts were compromised, allowing unauthorized access to a data storage location outside of Health Equity’s core systems.
What’s Being Done?
Health Equity says they don’t believe any stolen information has been used maliciously yet. They are offering affected customers two years of free credit monitoring, identity theft insurance, and restoration services. They also recommend customers regularly review their financial statements and credit reports for any suspicious activity.
What You Should Do
If you are a Health Equity customer, you should:
- Monitor your credit reports closely.
- Be vigilant about any suspicious financial activity.
- Contact Health Equity if you have any questions or concerns.
This breach highlights the importance of protecting your personal information online. Be cautious about the websites you visit and the information you share.