Loading story…
Connecticut officials disclosed a breach in the Medicaid provider portal used by the HUSKY Health program that exposed payment and claims information tied to about 41,000 members. The Connecticut Department of Social Services said its fiscal agent, Gainwell Technologies, detected the intrusion on June 25 after an unauthorized party compromised a provider account, making it the second portal-related incident affecting the program this year.
State officials said the exposed data included names, claim- or payment-related identification numbers, dates and details of medical services, billing information, payment amounts, and in some cases policy and group numbers for non-Medicaid insurance. DSS said there was no indication that electronic health records, Social Security numbers, or financial account details were compromised, and said the attacker appeared to be motivated by financial gain rather than an effort to obtain patient records. Gainwell locked down the portal and added security safeguards, while affected members are being notified by mail and offered free credit monitoring, identity monitoring, and fraud support services.
See attribution, scope, and your downstream exposure.
5 events from the most recent confirmed update back to the earliest known activity.
After discovering the unauthorized activity, Gainwell locked down the provider portal and implemented additional security safeguards. Connecticut DSS said it was working with its contractor, cybersecurity experts, and law enforcement to investigate and strengthen protections.
Gainwell Technologies detected an intrusion into a Connecticut Medicaid provider account in the HUSKY Health portal on June 25, 2026. The incident exposed claims and payment-related information associated with about 41,000 HUSKY Health members.
In March, an unauthorized user accessed accounts belonging to roughly 22,500 Hartford HealthCare patients in a separate security incident tied to a Medicaid provider portal. The later Connecticut disclosure identified this as an earlier portal-related incident in the same year.
DSS and Gainwell began sending notification letters by postal mail to affected members on Friday and offered free credit monitoring, identity monitoring, and fraud support services. The state also provided a contact number for people who believed they might be affected.
Connecticut's Department of Social Services disclosed that a breach of the Medicaid provider portal exposed payment and claims information tied to roughly 41,000 HUSKY Health members. DSS said the attacker appeared motivated by financial gain and that electronic health records, Social Security numbers, and financial account details were not compromised.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
See attribution, scope, and whether this vendor sits anywhere in your supply chain.
2 references tracked. Mallory keeps watching after this page renders.
teiss.co.uk
Open sourcemalware.news
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
The Illinois Department of Human Services (IDHS) exposed sensitive data of over 700,000 individuals after internal planning maps containing personal information were inadvertently made publicly accessible online. The incident was caused by misconfigured privacy settings on a mapping website used for resource allocation and decision-making, allowing unauthorized access to data from as early as 2021 until September 2025. The exposed information included addresses, case numbers, demographic details, and medical assistance plan names for Medicaid and Medicare Savings Program recipients, as well as names and case details for Division of Rehabilitation Services (DRS) customers. Upon discovery of the breach in September 2025, IDHS immediately secured the website and launched an investigation to assess the scope and cause of the exposure. The agency confirmed that approximately 672,616 Medicaid and Medicare Savings Program recipients and 32,401 DRS customers were affected. In response, IDHS updated the privacy settings to restrict access to authorized personnel and began notifying impacted individuals about the incident.
Jun 29, 2026
The Centers for Medicare and Medicaid Services (**CMS**) exposed some healthcare providers’ Social Security numbers through a downloadable database linked to a new Medicare provider directory, according to reporting by *The Washington Post* and *HIPAA Journal*. The directory was built to help seniors identify which doctors and medical providers accept specific insurance plans, but the underlying database was reportedly publicly accessible for several weeks. Reporters said they were able to identify dozens of SSNs by reviewing only a sample of the records, raising concerns about the handling of sensitive provider data in a system CMS had promoted as part of a broader healthcare technology modernization effort. CMS said the exposure stemmed from providers or their representatives entering information into incorrect fields, and the agency said it is working on a fix while adding stronger submission and validation safeguards. The disclosure renewed criticism of the provider directory’s rollout, which had already faced scrutiny over inaccurate insurance network information. The incident also lands amid heightened concern over Social Security number exposure more broadly, following separate reporting on the National Public Data breach, where a threat actor allegedly stole and leaked a massive trove of personal records that included SSNs and other identifying information.
Jun 29, 2026
Unlimited Technology Systems, a Montgomery, Ohio-based provider of revenue cycle management services, disclosed a data breach affecting **3,803,750 individuals** after hackers stole information from one of its commercial data centers. The intrusion occurred between **October 10 and October 15, 2025**, and was discovered on **October 19, 2025**. The company later reported the incident to the US Department of Health and Human Services in late July 2026, and HHS added it to its breach portal. The stolen data included personal, medical, and health insurance information such as **Social Security numbers**, medical record numbers, diagnoses, dates of service, insurance details, and scanned identity documents. Unlimited Technology Systems said full patient medical records, medical imaging, and financial account or payment card data were not exposed, and it has not identified attempted or actual misuse of the stolen information. The company is offering affected individuals two years of credit monitoring, fraud consultation, and identity theft restoration services.
Aug 10, 2026