Cyberattackers Accessed HealthEquity Customer Info via Third Party

HealthEquity disclosed a breach in which a third-party hosted unstructured data repository was compromised, exposing personally identifiable information (including names, addresses, phone numbers, employer details, Social Security numbers, and dependent information) for roughly 4.5 million US customers; the company detected an anomaly on March 25, investigated through June, and is notifying affected parties while working with vendors to strengthen protections and third‑party risk controls.