Threat Intelligence Brief
Curated summary with source attribution
Source: portal.ct.gov
Threat Risk: Medium
Victim: Gainwell Technologies / CT Department of Social Services
Incident: Unauthorized access to payment accounts on the HUSKY provider portal.
Impact: Exposure of claims, payment, and insurance information for 41,000 Medicaid members.
Attacker: Unidentified threat actors
Analysis: The incident involved unauthorized access to a provider’s reimbursement account, likely via compromised credentials or a portal vulnerability. While high-value identifiers like Social Security numbers and health records remained secure, the exposure of billing and insurance data presents a significant privacy risk. The attacker’s focus on payment accounts suggests a financially motivated objective.
Recommendations: Enforce multi-factor authentication (MFA) across all provider and administrator portals; Implement anomaly detection for reimbursement and payment account access; Perform rigorous security audits of third-party fiscal agent platforms
Source: Connecticut Department of Social Services
Editorial note: this post summarizes third-party reporting and links to the original source.
View Original Source