Carding Forum
Professional
- Messages
- 2,788
- Reaction score
- 1,176
- Points
- 113
HealthEquity, a provider of medical bills, reported a major data leak.
HealthEquity, one of the largest providers of medical savings accounts in the United States, reported a large-scale data leak. The incident affected the information of 4.3 million people.
The company discovered unauthorized access to confidential health information and personal data of customers on March 9, 2024. However, the leak was confirmed only on June 26 after an internal investigation.
According to HealthEquity, the attackers used the compromised credentials of a company partner to access an unsecured data warehouse outside of the main systems.
The stolen information included full names, home addresses, phone numbers, employer and employee IDs, social security numbers, general information about dependents, and payment card details (without card numbers).
HealthEquity has already taken security measures. The company blocked unauthorized sessions, restricted access from the attackers IP addresses, and performed a global password reset for the compromised vendor account.
Affected customers will be offered a two-year credit history monitoring and identity theft protection service through Equifax. The company recommends that you carefully monitor your bank statements and verify that your personal information in your HealthEquity account is correct.
At the moment, no hacker group has claimed responsibility for the attack, and the stolen data has not yet appeared in the public domain. HealthEquity plans to send out notifications about the leak to all victims by August 9, 2024.
Source
HealthEquity, one of the largest providers of medical savings accounts in the United States, reported a large-scale data leak. The incident affected the information of 4.3 million people.
The company discovered unauthorized access to confidential health information and personal data of customers on March 9, 2024. However, the leak was confirmed only on June 26 after an internal investigation.
According to HealthEquity, the attackers used the compromised credentials of a company partner to access an unsecured data warehouse outside of the main systems.
The stolen information included full names, home addresses, phone numbers, employer and employee IDs, social security numbers, general information about dependents, and payment card details (without card numbers).
HealthEquity has already taken security measures. The company blocked unauthorized sessions, restricted access from the attackers IP addresses, and performed a global password reset for the compromised vendor account.
Affected customers will be offered a two-year credit history monitoring and identity theft protection service through Equifax. The company recommends that you carefully monitor your bank statements and verify that your personal information in your HealthEquity account is correct.
At the moment, no hacker group has claimed responsibility for the attack, and the stolen data has not yet appeared in the public domain. HealthEquity plans to send out notifications about the leak to all victims by August 9, 2024.
Source
