2026 Gainwell Technologies — Connecticut HUSKY portal breach via compromised provider credentials
Data compromised
Names, Medicaid claim IDs, service dates, billing/payment details, non-Medicaid insurance policy info; no SSNs or financial accounts in accessed system per CT notice
Technical writeup
Connecticut DSS and Medicaid fiscal agent Gainwell Technologies disclosed that on March 25, 2026 they learned an unauthorized third party used compromised Hartford HealthCare employee credentials to access a small number of payment accounts on the HUSKY provider portal starting March 4, 2026, downloading files with patient information. The March 2026 Connecticut press release states approximately 22,500 individuals were affected; investigators described financially motivated activity rather than a direct PHI hunt. Postal notifications began May 22, 2026 with credit and identity monitoring.
Root cause
Compromised Hartford HealthCare employee credentials used to access HUSKY provider portal (March 4, 2026)