Connecticut’s health insurance exchange experienced dozens of mostly small data breaches over about a 3 1/2-year period. The vast majority of those breaches involved a single call center contractor, a state auditor report says. Access Health did not report 44 breaches of clients’ personally identifiable information to the state auditor and state comptroller. The report recommends the exchange take steps to improve its protection of PII information. The largest of the 44 breaches – all of which occurred between July 2017 and March 2021 – involved a phishing scam.”]

