Monday, July 15, 2024
EHA

Hackers Breach HealthCare.gov System and Steals Sensitive Personal Data of 75,000 Customers

Hackers compromised the computer system that interacts with the HealthCare website used by insurance agents to directly enroll the customers for the insurance plan.

The Centers for Medicare & Medicaid Services confirmed the security breach last Friday. Approximately 75,000 people personal data were accessed by the hackers.

CMS reads the anomalous activity with their direct enrollment pathway on October 13, 2018, and the agent and broker accounts associated with the activity was deactivated.

Customers applying for healthcare plans should provide details such as names, addresses, social security number, citizenship, and income details. CMS did not provide any details on what kind of data stolen by hackers.

“Our number one priority is the safety and security of the Americans we serve. We will continue to work around the clock to help those potentially impacted and ensure the protection of consumer information,” said CMS Administrator Seema Verma.

CMS confirmed the HealthCare website was not affected and the FFE enrollment channels, including HealthCare.gov and the Marketplace Call Center, remain operational.

“We are working to address the issue, implement additional security measures, and restore the Direct Enrollment pathway for agents and brokers within the next 7 days,” reads CMS press release.

Last week researchers uncovered a huge database of almost 35 Million U.S Voter records selling on hacking forums with a price range between $150 USD to $12,500 USD.

Related Read

35 Million U.S Voter Records Selling in Popular Dark web Hacking Forum from $150 USD to $12,500 USD

FitMetrix Unprotected Passwordless Database Exposed Millions of User​ Data

Pentagon Discloses Data Breach, More Than 30,000 Workers Have Affected

Website

Latest articles

Critical Cellopoint Secure Email Gateway Flaw Let Attackers Execute Arbitrary Code

A critical vulnerability has been discovered in the Cellopoint Secure Email Gateway, identified as...

Singapore Banks to Phase out OTPs for Bank Account Logins Within 3 Months

The Monetary Authority of Singapore (MAS) and The Association of Banks in Singapore (ABS)...

GuardZoo Android Malware Attacking military personnel via WhatsApp To Steal Sensitive Data

A Houthi-aligned group has been deploying Android surveillanceware called GuardZoo since October 2019 to...

ViperSoftX Weaponizing AutoIt & CLR For Stealthy PowerShell Execution

ViperSoftX is an advanced malware that has become more complicated since its recognition in...

Malicious NuGet Campaign Tricking Developers To Inject Malicious Code

Hackers often target NuGet as it's a popular package manager for .NET, which developers...

Akira Ransomware Attacking Airline Industry With Legitimate Tools

Airlines often become the target of hackers as they contain sensitive personal and financial...

DarkGate Malware Exploiting Excel Files And SMB File Shares

DarkGate, a Malware-as-a-Service (MaaS) platform, experienced a surge in activity since September 2023, employing...
Guru baran
Guru baranhttps://gbhackers.com
Gurubaran is a co-founder of Cyber Security News and GBHackers On Security. He has 10+ years of experience as a Security Consultant, Editor, and Analyst in cybersecurity, technology, and communications.

Free Webinar

Low Rate DDoS Attack

9 of 10 sites on the AppTrana network have faced a DDoS attack in the last 30 days.
Some DDoS attacks could readily be blocked by rate-limiting, IP reputation checks and other basic mitigation methods.
More than 50% of the DDoS attacks are employing botnets to send slow DDoS attacks where millions of IPs are being employed to send one or two requests per minute..
Key takeaways include:

  • The mechanics of a low-DDoS attack
  • Fundamentals of behavioural AI and rate-limiting
  • Surgical mitigation actions to minimize false positives
  • Role of managed services in DDoS monitoring

Related Articles