Hackers steal data of 75, 000 users after Healthcare.gov FFE breach

[InfoSec News <alerts () infosecnews org>]

https://www.zdnet.com/article/hackers-steal-data-of-75000-users-after-healthcare-gov-ffe-breach/

By Catalin Cimpanu
Zero Day
ZDNet News
October 21, 2018

The system is named Federally Facilitated Exchanges (FFE), and is managed 
by the Centers for Medicare & Medicaid Services (CMS). Healthcare 
insurance agents and brokers use the FFE to enroll users into Obamacare 
plans made available through the official HealthCare.gov portal.

The CMS said that it detected "anomalous system activity" in the FFE on 
October 13, 2018, last Saturday, and started an immediate investigation.

A breach was confirmed the past week, on Tuesday, October 16.

"The agent and broker accounts that were associated with the anomalous 
activity were deactivated, and - out of an abundance of caution - the 
Direct Enrollment pathway for agents and brokers was disabled," the CMS 
said in a press release.

[...]



--
Subscribe to InfoSec News
https://www.infosecnews.org/subscribe-to-infosec-news/
https://twitter.com/infosecnews_