HealthCare.gov Server Compromised by Hackers

[InfoSec News <alerts () infosecnews org>]

http://www.infosecnews.org/healthcare-gov-server-compromised-by-hackers/

By William Knowles @c4i
Senior Editor
InfoSec News
September 5, 2014

Unknown hackers breached a test server with malware on a Health and Human 
Services (HHS) site that supports the Obamacare insurance website 
HealthCare.gov

The commonplace malware was designed to launch “denial of service” attacks 
against other websites, HHS said, and there is no evidence any consumers’ 
personal information was sent to any external IP address. The attack did 
not appear to directly target HealthCare.gov, and the server that was 
targeted did not contain any consumers’ personal information.

The Wall Street Journal reports that the server was connected to more 
sensitive parts of the website that had better security protections, the 
officials said. That means it would have been possible, if difficult, for 
the intruder to move through the network and try to view more protected 
information, an official at the Department of Health and Human Services 
said. There is no indication that happened, and investigators suspect the 
hacker didn’t intend to target a HealthCare.gov server.

[...]

--
Evident.io - Continuous Cloud Security for AWS.
Identify and mitigate risks in 5 minutes or less.
Sign up for a free trial @ https://evident.io/