HealthEquity Data Breach (2025): What Was Exposed & What to Do

✅ Official notice on file. HealthEquity, Inc. filed this data breach notice with the California Attorney General on May 16, 2025. Compare it with the letter you received: the official copy is linked below.

View the official notice · Read the letter (PDF)

HealthEquity, Inc. reported a data breach caused by unauthorized access to its computer network. The information involved includes Social Security number, payment card, medical information, username / password, phone number, home address.

Key facts

Discovered Mar 25, 2024
Incident type Network intrusion
Data exposed Social Security number, Payment card, Medical information, Username / password, Phone number, Home address, Employment / payroll info
Reported to California AG May 16, 2025
Company helpline 1-888-244-3079

What to do now

  1. Freeze your credit for free at Equifax, Experian and TransUnion, and request an IRS Identity Protection PIN at irs.gov to block fraudulent tax returns in your name.
  2. Ask your card issuer to replace the card and review recent transactions; card fraud is usually refunded if reported quickly.
  3. Review the Explanation of Benefits statements from your insurer for services you never received.
  4. Change the password on this account and on any other site where you reused it, and turn on two-factor authentication.
  5. Be wary of calls or texts that mention this incident and ask for codes or payment.
  6. Check your pay stubs and W-2 for changes to direct deposit or withholding you did not make.
  7. Get your free credit reports at AnnualCreditReport.com and look for accounts you do not recognize.
  8. Call the HealthEquity, Inc. helpline at 1-888-244-3079 if you have questions about your letter.

Timeline

  • Mar 25, 2024 — HealthEquity, Inc. discovers the incident
  • May 16, 2025 — Breach reported to the California Attorney General

Previous breaches at HealthEquity, Inc.

  • Nov 15, 2018 — Social Security number, Health insurance, Home address (notice)
  • Jan 25, 2016 — Social Security number, Health insurance (notice)

Other recent data breaches

Source: notification letter and filing submitted by HealthEquity, Inc. to the California Attorney General. BreachLetter is not affiliated with HealthEquity, Inc.. Details extracted from the official letter; always follow the instructions in your own copy.