Equinox equinox.org Equinox data breach: what happened and what to do
Equinox, a New York health and human services provider, reported a ransomware incident that affected 21,565 people. HHS lists names, Social Security numbers, ID and passport numbers, financial and health insurance details, diagnoses and medications.
View all 13,115 breaches- Breach date
- 29 Apr 2024
- Made public
- 15 Nov 2024
- Affected
- 21,565
- Data exposed
- Names, Physical addresses, Dates of birth, Social security numbers, Government issued IDs, Passport numbers, Financial information, Health insurance information, Medical information, Treatment information
- Last updated
What happened
Equinox is a New York health and human services provider. It reported to HHS that a ransomware incident affected the health information of 21,565 people. Press coverage dates the attack to 29 April 2024. The LockBit group claimed it, but Equinox hasn't confirmed that.
What was exposed
HHS's description lists names, addresses, dates of birth, Social Security numbers, driver's license or other government ID numbers, passport numbers, financial information, health insurance information, diagnoses, medications and other treatment information.
This is one of the broader sets in this kind of notice. Identity numbers support identity theft, financial details raise the risk of payment fraud, and treatment information is sensitive in its own right and can be used in targeted scams.
The company's response
Equinox notified HHS, affected individuals and the media, and posted a substitute notice on its website. It added administrative, technical and security safeguards and trained staff on protecting health information. A $685,000 settlement resolved class actions over the incident, according to ClassAction.org.
What it means for you
Freeze your credit, replace exposed cards if financial details were yours, and check insurer statements.
What to do if you were in it
- 1
Freeze your credit
Place a free credit freeze at Equifax, Experian and TransUnion. It blocks most new accounts opened in your name, and you can lift it whenever you apply for credit yourself.
- 2
Replace exposed cards and check accounts
If financial information was in your notice, ask your bank for new card numbers and watch statements for charges you don't recognize.
- 3
Check insurer statements
Read explanation of benefits statements and question treatment you didn't receive.
- 4
Check whether your email or phone is in this and other breaches
Run a free Serus scan. Serus monitors breach databases and the dark web and alerts you when your details show up in a new leak.
Frequently asked
Was I affected by the Equinox data breach?
Affected clients and employees received a letter. HHS lists 21,565 people.
What was exposed?
HHS lists names, addresses, dates of birth, Social Security and ID numbers, passport numbers, financial and health insurance information, diagnoses and medications.
Is there a settlement?
ClassAction.org reports a $685,000 settlement. Check the settlement administrator for current deadlines.
Sources
Something wrong or out of date? Tell us and we'll re-check it.
