2026 CT DSS / Gainwell — HUSKY provider portal; ~41K members notified Aug 21
Data compromised
Names; provider payment-account / Medicaid claim IDs; service dates; services and billing detail; payment amounts; non-Medicaid insurance policy/group numbers. DSS: no EHR, SSNs, or financial account numbers compromised.
Technical writeup
Connecticut Department of Social Services and Gainwell Technologies (HUSKY Medicaid fiscal agent) announced on August 21, 2026 that an unauthorized third party accessed a provider reimbursement account on the HUSKY provider portal beginning June 18, 2026; Gainwell became aware of unauthorized access to certain payment accounts on June 25, 2026. DSS and Gainwell say claims and payment information for approximately 41,000 HUSKY members were obtained. They state electronic health records, Social Security numbers, and financial account information were not compromised, describe financially motivated activity, and began postal notifications with credit/identity monitoring offers on August 21, 2026 (help line 1-866-200-0986). Distinct from the March–May 2026 Hartford HealthCare credential incident (~22,500).
Root cause
Unauthorized access to HUSKY provider reimbursement / payment accounts (access began June 18, 2026; Gainwell aware June 25)