Intruders at HealthEquity rifled through storage, stole 4.3M people's data

HealthEquity disclosed a data security event impacting approximately 4.3 million individuals after a vendor's user accounts were compromised, allowing attackers to access stored data containing names, addresses, phone numbers, some SSNs, employer/employee IDs and limited payment information; no malware or ransomware was detected and the company engaged third-party forensics, reset vendor credentials, blocked malicious IPs and offered affected people credit monitoring.