HealthEquity says data breach impacts 4.3 million people

HealthEquity disclosed that threat actors used a vendor's compromised credentials to access an external unstructured data repository and exfiltrate sensitive personal and protected health information for about 4.3 million individuals; the incident occurred on March 9, 2024, was validated on June 26, and the company is notifying impacted people and offering two years of credit monitoring.