HealthEquity Informational Website
On April 11, 2018, a HealthEquity team member’s email account was accessed by an unauthorized individual. HealthEquity discovered the unauthorized access on April 13, 2018, and blocked the individual from the email account. Although we have no evidence that the contents of the mailbox were downloaded by the unauthorized individual, because we cannot rule out that possibility, HealthEquity retained a leading third party forensic firm to analyze the contents of the mailbox. Contained in the mailbox were documents that included individuals’ information such as name, member ID, employer name, employer ID, patient name, payer information, and, in some, but not all, cases, full Social Security number. Those potentially impacted by this incident will receive letter notification from HealthEquity during or before the week of June 18, 2018.
The forensic investigation confirmed that unauthorized access was limited to one team member’s email account and no other HealthEquity systems were impacted. The team member’s password has been changed and we have confirmed that the unauthorized access has been eliminated. We have also contacted law enforcement and have notified regulators regarding this incident. Internally, we are taking additional actions to strengthen the security of our email systems moving forward. This includes the implementation of additional technical security measures and training of our team. HealthEquity encourages potentially impacted individuals to remain vigilant against incidents of identity theft and fraud by reviewing account statements and credit reports for suspicious activity.
HealthEquity’s investigation has found no evidence of actual or attempted misuse of information. If you have additional questions about the incident, please contact our dedicated call center at 888.262.1560, available from 8 am – 8 pm Eastern.
This website is maintained by ID Experts® on behalf of HealthEquity for the purpose of providing you with valuable services and information to mitigate any risks in the event that you experience identity theft as a result of this situation. For additional information, see our Frequently Asked Questions.
As a result of this incident and at no cost to you, HealthEquity is offering MyIDCare identity theft protection services through ID Experts to provide you with credit monitoring and complete recovery services. MyIDCare product helps protect your identity with:
- Credit monitoring that alerts you to any changes to your credit report
- CyberScan will monitor criminal websites, chat rooms, and bulletin boards for illegal selling or trading of your personal information
- Access to Fraud Resolution Representatives to resolve any identity theft issues
- Exclusive educational materials on protecting your identity including instructive articles, up-to-date information on new identity theft scams and tips for protecting yourself
- Identity theft insurance coverage for up to $1,000,000
Use the enrollment code in your notification letter to begin the enrollment process.
The above link will redirect you to our secure enrollment site.