HealthEquity, Inc. data breach
HealthEquity, Inc. appears in 32 breach notices filed with New Hampshire DOJ, California AG, HHS OCR, Maryland AG, Washington AG, Oregon DOJ, Montana DOJ and SC Consumer Affairs, most recently reported on May 19, 2025.
Also listed as: HealthEquity; HealthEquity Inc.; HealthEquity Inc
Breach notices filed with regulators
| Reported | Filed with | Breach date(s) | People affected | Data involved | Source |
|---|---|---|---|---|---|
| May 19, 2025 | New Hampshire DOJ | Not listed | Not listed | Not listed | Notice ↗ |
| May 16, 2025 | California AG | Mar 9, 2024 | Not listed | Not listed | California AG list ↗ |
| May 16, 2025 | New Hampshire DOJ | Not listed | Not listed | Not listed | Notice ↗ |
| May 15, 2025 | California AG | Mar 9, 2024 | Not listed | Not listed | California AG list ↗ |
| May 15, 2025 | New Hampshire DOJ | Not listed | Not listed | Not listed | Notice ↗ |
| May 13, 2025 | California AG | Mar 9, 2024 | Not listed | Not listed | California AG list ↗ |
| May 13, 2025 | New Hampshire DOJ | Not listed | Not listed | Not listed | Notice ↗ |
| May 9, 2025 | New Hampshire DOJ | Not listed | Not listed | Not listed | Notice ↗ |
| Apr 25, 2025 | New Hampshire DOJ | Not listed | Not listed | Not listed | Notice ↗ |
| Apr 17, 2025 | California AG | Mar 9, 2024 | Not listed | Not listed | California AG list ↗ |
| Apr 17, 2025 | New Hampshire DOJ | Not listed | Not listed | Not listed | Notice ↗ |
| Apr 16, 2025 | New Hampshire DOJ | Not listed | Not listed | Not listed | Notice ↗ |
| Apr 9, 2025 | California AG | Mar 9, 2024 | Not listed | Not listed | California AG list ↗ |
| Apr 9, 2025 | New Hampshire DOJ | Not listed | Not listed | Not listed | Notice ↗ |
| Mar 24, 2025 | New Hampshire DOJ | Not listed | Not listed | Not listed | Notice ↗ |
| Mar 21, 2025 | California AG | Mar 9, 2024 | Not listed | Not listed | California AG list ↗ |
| Dec 20, 2024 | HHS OCR | Not listed | 1,549 people (total reported to HHS) | Not listed | HHS OCR list ↗ |
| Aug 15, 2024 | Maryland AG | Not listed | 11 Maryland residents | NameSocial Security numberDate of birthEmail addressAddressPhone number | Notice ↗ |
| Jul 26, 2024 | California AG | Mar 9, 2024 | Not listed | Not listed | California AG list ↗ |
| Jul 26, 2024 | Washington AG | Mar 9, 2024 – Mar 25, 2024 | 102,140 Washington residents | NameSocial Security NumberFull Date of BirthHealth Insurance Policy or ID NumberMedical Information | Washington AG list ↗ |
| Jul 26, 2024 | Oregon DOJ | Mar 9, 2024 – Mar 25, 2024 | 4,300,000 Oregon residents | Not listed | Oregon DOJ list ↗ |
| Jul 26, 2024 | Montana DOJ | Mar 25, 2024 | 17,606 Montana residents | Not listed | Notice ↗ |
| Jul 26, 2024 | SC Consumer Affairs | Not listed | 110,216 South Carolina residents | Not listed | Notice ↗ |
| Jul 26, 2024 | Maryland AG | Not listed | 107,163 Maryland residents | NameSocial Security numberDate of birthFinancial account informationPayment card informationMedical informationHealth insurance informationEmail addressAddressPhone number | Notice ↗ |
| Jul 26, 2024 | Maryland AG | Not listed | 13 Maryland residents | NameSocial Security numberDate of birthFinancial account informationMedical informationEmail addressAddressPhone number | Notice ↗ |
| Nov 19, 2018 | SC Consumer Affairs | Not listed | 1,616 South Carolina residents | Not listed | Notice ↗ |
| Nov 15, 2018 | California AG | Sep 4, 2018, Oct 5, 2018 | Not listed | Not listed | California AG list ↗ |
| Nov 15, 2018 | Washington AG | Sep 4, 2018 – Oct 5, 2018 | 27,175 Washington residents | NameSocial Security Number | Washington AG list ↗ |
| Nov 15, 2018 | Oregon DOJ | Sep 4, 2018 | 189,957 Oregon residents | Not listed | Oregon DOJ list ↗ |
| Nov 15, 2018 | Montana DOJ | Sep 4, 2018 – Oct 5, 2018 | 2,141 Montana residents | Not listed | Notice ↗ |
| Jun 13, 2018 | Montana DOJ | Apr 11, 2018 – Apr 13, 2018 | 8 Montana residents | Not listed | Notice ↗ |
| Jan 25, 2016 | California AG | Dec 11, 2015 | Not listed | Not listed | California AG list ↗ |
Each row is a notice as published by the agency. For state lists, the number affected counts only that state's residents; HHS lists the total reported. SEC rows are Form 8-K Item 1.05 filings, which usually don't give a count. A notice does not mean a settlement exists, and a settlement may cover a different incident than a given notice.
Is there a settlement?
We don't track an open class-action settlement for HealthEquity, Inc. right now. Settlements usually come months or years after a breach. Get an email when new settlements are announced.
What you can do now
- Read the notice letter if you got one. It says what data was involved and may offer free credit monitoring with an enrollment deadline.
- Consider a free credit freeze at Equifax, Experian and TransUnion, especially if your Social Security number was involved.
- Change reused passwords and turn on two-factor authentication.
- Watch your bank, card and insurance statements for activity you don't recognize.
Get new settlements and deadline reminders
One email a week: newly announced data-breach settlements and claim deadlines that are about to close. Free. Unsubscribe anytime.