A new data breach occurred on April 11 at an insurance company with millions of customers. Last week, an employee of HealthEquity had her email compromised by an unknown person. Two days later, the breach was discovered and she contacted another email forensics firm. HealthEquity said it would provide five years of free identity theft protection and credit monitoring services to anyone whose information was compromised.
The company said the information leaked via email included the names and IDs of 23,000 of the company's employees. There was also information about various customer accounts, charges, and identification numbers.
“The healthcare industry is becoming an increasingly important target for cyberattacks due to the high value of its information,” said Tim Erlin, a security researcher. “The biggest risk for those affected is identity theft as their ID numbers have been stolen, and the use of their sensitive data by third parties is possible. HealthEquity seems to have understood the gravity of the situation as it will be providing free online monitoring for many years to those affected. The fact that the breach was discovered just 2 days after the day it occurred shows that the company is paying attention to its infrastructure!”
also extremely concerning that healthcare providers are so vulnerable to attacks, with citizens' data being so easily leaked and later resold on the dark web . This sector holds very sensitive and private data, and is unfortunately prone to a wide range of attacks.
