At what point do state Attorney Generals and the federal investigators step in? This wasn't just a normal data breach, they got patient info AND provider account information. It is probably much worse than this press release even admits.
https://portal.ct.gov/dss/press-room/press-releases/connecticut-department-of-social-services-and-gainwell-technologies-notice-of-data-security-incident?language=en_US