2024 HealthEquity — 4.3M HSA holders (third-party breach)
Data compromised
SSNs, diagnoses, prescriptions, partial payment card information
Technical writeup
Third-party vendor breach exposed health savings account holder data including SSNs, diagnoses, prescriptions, and partial payment card information for 4.3 million people. Discovered March 2024.
Root cause
Third-party vendor breach; supply chain