The Connecticut Department of Social Services reported a data incident affecting the protected health information of 41,000 individuals, involving claims and payment information related to the Connecticut Medicaid (HUSKY) programme after an unauthorised user gained access to a state Medicaid provider reimbursement account. DSS was informed by its fiscal agent and account administrator, Gainwell Technologies, on 25 June 2026, and the investigation assessed the access was "most likely financially motivated" rather than aimed at patient data, although data theft could not be ruled out. The exposed information includes names, identification numbers associated with Medicare claims or provider payment accounts, dates of service, payment information, details of services received, amounts paid and information related to non-Medicaid health insurance — but not electronic medical records, financial account numbers or Social Security numbers. The provider portal has been secured and affected individuals offered credit monitoring and identity-theft protection. It is the second HUSKY-related incident this year: an earlier March breach affected roughly 22,500 individuals via a Hartford Healthcare employee's compromised credentials.
| Attribute | Detail |
|---|---|
| Sector | Healthcare |
| Date | 2026-11-03 |
| Source | HIPAA Journal |
| Reliability | Tier 2 |