Hartford HealthCare Medicaid Portal Breach Exposes Data of 22,500 Patients A cyberattack on the Connecticut Medicaid provider portal compromised sensitive information for approximately 22,500 patients, authorities confirmed. The breach, discovered on March 25, involved a hacker using stolen credentials from Hartford HealthCare employees to access the system on March 4. The attack targeted the portal managed by Gainwell Technologies, the fiscal agent for Connecticut’s HUSKY Medicaid program, in collaboration with the Connecticut Department of Social Services (DSS). Investigators, working with federal law enforcement and external cybersecurity experts, determined the incident was financially motivated rather than an attempt to steal patient data. The hacker’s access was terminated, and the breach was contained. Exposed data varied by individual but included full names, Medicaid claim identification numbers, dates of medical services, billing details, payment amounts, and non-Medicaid insurance policy information. Notably, Social Security numbers and financial account details were not accessed, as they were not stored in the compromised system. In response, DSS and Gainwell secured the portal, implemented additional security measures, and began notifying affected individuals via mail on May 22. The notifications included offers for credit monitoring, identity protection, and fraud support services. Impacted individuals were directed to call 1-855-744-4488 for further assistance.