Gainwell Technologies Data Breach Exposes Patient Information of 22,500 Individuals

• •Unauthorized access to Hartford HealthCare accounts via compromised employee credentials.
• •Approximately 22,500 individuals affected, with exposure of sensitive patient information.
• •DSS and Gainwell Technologies have contained the breach and are enhancing security measures.

On March 4, 2026, Gainwell Technologies experienced a data breach when an unauthorized third party accessed Hartford HealthCare payment accounts on the HUSKY provider portal using compromised employee credentials. The breach, which went undetected for approximately three weeks, affected around 22,500 individuals, exposing their full names, identification numbers, medical service dates, billing information, and non-Medicaid health insurance details. Importantly, Social Security numbers and financial account information were not compromised. The Connecticut Department of Social Services (DSS) and Gainwell Technologies initiated an investigation and took steps to secure the portal, successfully containing the threat. Affected individuals were notified by postal mail starting May 22, 2026, and offered credit monitoring services. The investigation confirmed that the breach appeared financially motivated rather than aimed at acquiring patient data.