Showing posts with label security breach. Show all posts
Showing posts with label security breach. Show all posts

Wednesday, January 22, 2014

Security Expert Hacks Obamacare Website In 4 Minutes; Accesses 70,000 Records



ZeroHedge





Submitted by Michael Krieger of Liberty Blitzkrieg blog,
The hits just keep on coming for ObamaCare. It was less than two weeks ago that I highlighted the potential premium rate death spiral that ObamaCare faces due to the fact that only old and sick people are signing up for the program. Now it seems there are further security related concerns plaguing the site, as cyber-security expert David Kennedy recently claimed that “gaining access to 70,000 personal records of Obamacare enrollees via HealthCare.gov took about 4 minutes.”
It’s actually hard to be this incompetent if you tried. More from the Washington Times:
The man who appeared before Congress last week to explain the security pitfalls of HealthCare.gov took to Fox News on Sunday to explain just how easy it was to penetrate the website.

Hacking expert David Kennedy told Fox’s Chris Wallace that gaining access to 70,000 personal records of Obamacare enrollees via HealthCare.gov took about 4 minutes and required nothing more than a standard browser, the Daily Caller reported.

Read More Here
.....
Enhanced by Zemanta

Saturday, November 9, 2013

Exclusive: HealthCare.gov Users Warn of Security Risk, Breach of Privacy

Obamacare (c) Desert Rose Creations / Family Survival Protocol  2013 photo obamacarelogo_zps3de31909.jpg
Obamacare (c) Desert Rose Creations / Family Survival Protocol  2013

..........

The Heritage Foundation

Justin Hadley logged on to HealthCare.gov to evaluate his insurance options after his health plan was canceled. What he discovered was an apparent security flaw that disclosed eligibility letters addressed to individuals from another state.
“I was in complete shock,” said Hadley, who contacted Heritage after becoming alarmed at the breach of privacy.
Hadley, a North Carolina father, buys his insurance on the individual market. His insurance company, Blue Cross Blue Shield of North Carolina, directed him to HealthCare.gov in a cancellation letter he received in September.
After multiple attempts to access the problem-plagued website, Hadley finally made it past the registration page Thursday. That’s when he was greeted with a downloadable letter about eligibility — for two people in South Carolina. (Screenshot below.)
Capture 1
The letter, dated October 8, acknowledges receipt of an application to the Health Insurance Marketplace and the eligibility of family members to purchase health coverage. The letter was addressed to Thomas Dougall, a lawyer from Elgin, SC.
Hadley shared a screenshot and copy of the letter with redacted personal information.
Capture 2
Hadley wrote to Heritage on Thursday night and also contacted the U.S. Department of Health and Human Services, which administers HealthCare.gov, as well as elected officials in his state. He has yet to hear back from HHS, even though HealthCare.gov still displays the personal information of the South Carolina residents on his account.
Hadley reached out to Dougall on Friday to notify him of the breach. Dougall, who spoke to Heritage this evening, said he was evaluating health care options in early October. Dougall said he was able to register on HealthCare.gov, but decided not to sign up for insurance.
“The plans they offered were grossly expensive and didn’t provide the level of care I have now,” he said.
Dougall said he never saw the October 8 letter until Hadley sent it to him Friday.
After learning of the privacy breach, Dougall spent Friday evening trying to contact representatives from HealthCare.gov to no avail; he spent an hour waiting on the telephone and an online chat session was unhelpful. He also wrote to Senators Lindsey Graham (R-SC) and Tim Scott (R-SC), along with Representative Joe Wilson (R-SC).
“I want my personal information off of that website,” Dougall said.
Security Risk
Last week, the Associated Press disclosed a government memo revealing the “high” security risk for HealthCare.gov. Those concerns surfaced at Wednesday’s hearing with HHS Secretary Kathleen Sebelius, who claimed the system was secure.


Read More Here
Enhanced by Zemanta