HealthEquity, a non-bank health savings trustee responsible for servicing HSA accounts, suffered a massive breach in March 2024 after a third-party’s account was accessed by an unauthorized user. While specific personal information may vary for each individual, the following data could be compromised: names, employee IDs, employers, addresses, phone numbers, social security numbers, and dependent contact information. Payment information was not affected by the breach.