Affordable Care Act Website Security Tests Unfinished Before Lau - WSPA.com

Affordable Care Act Website Security Tests Unfinished Before Launch

Posted: Updated:
WASHINGTON, D.C. - A CBS News analysis finds key tests to ensure the security and privacy of customer information on troubled Obamacare website fell behind schedule. 

A deadline for final security plans was delayed three times over the summer, and final top-to-bottom security tests never were finished before the launch.

All of that is adding to concerns about the safety of personal information on the site.

Technology experts say this website did not go through proper security testing before it went live on October 1 -- and they've shared with CBS News several flaws that could expose personal information. Now we're starting to see real-like examples of what can go wrong.

With critics openly mocking the Obama administration about problems with HealthCare.gov, officials insist on one thing: at least the website is safe. White House Press Secretary Jay Carney said, "Consumers can trust that their information is protected by stringent security standards."

South Carolina attorney Thomas Dougall is not so sure. He said: "My information is out there, and I want it deleted from their website."

Dougall and his wife signed up on the website in October, but over the weekend got a disturbing call about a man in North Carolina who also registered, and was shocked to get the Dougalls' eligibility letters, including their names and home address.

"It's just a system that we've continually been told was secure and now I've found out it's not secure," Dougall said.

A spokeswoman for the Department of Health and Human Services confirmed: "An incident involving the personal information of one consumer was reported...and we took immediate steps. We identified a piece of software code that needed to be fixed and that fix is now in place."

But other problems are not fixed. Software experts tell CBS News they have identified multiple security issues, including with user names and passwords.

We gave one technology expert the real HealthCare.gov user name of a CBS employee. Within seconds, he identified the specific security questions she selected to reset her password.

Shawn Henry, president of the cyber security firm Crowdstrike Services and the former assistant director of the FBI's Cyber Division, said: "If somebody's got the ability to look at the source code and be able to reverse engineer that and identify what somebody's personal questions are, that should be of concern."

On "CBS This Morning," CBS News correspondent Jan Crawford reported House Intelligence Committee Chairman Rep. Mike Rogers, R-Mich., tells her this is just one more reason the website should be taken down and tested for security vulnerabilities --and Democrats are also making that point -- concerns that will likely be raised when Health and Human Services Secretary Kathleen Sebelius testifies again before Congress on Wednesday.

  • Top StoriesTop StoriesMore>>

  • NC Apple Fest Kicks Off In Downtown Hendersonville

    NC Apple Fest Kicks Off In Downtown Hendersonville

    Friday, August 29 2014 12:25 AM EDT2014-08-29 04:25:58 GMT
    Apple Festival kicks off in Hendersonville.Apple Festival kicks off in Hendersonville.
    From the NC Apple Festival website:The 2014 NC Apple Festival kicks off Friday in downtown Hendersonville, NC.The Main Street event run through the weekend of August 29- September 1.The festival not only features a street fair with arts crafts vendors but it includes continuous live musical entertainment, apple growers and their apples, children's youth activities, special exhibits open houses, food, and, to top it all off, on Labor Day, the King Apple Parade...
    From the NC Apple Festival website:The 2014 NC Apple Festival kicks off Friday in downtown Hendersonville, NC.The Main Street event run through the weekend of August 29- September 1.The festival not only features a street fair with arts crafts vendors but it includes continuous live musical entertainment, apple growers and their apples, children's youth activities, special exhibits open houses, food, and, to top it all off, on Labor Day, the King Apple Parade...
  • Gamecocks Lose Season Opener 52-28 to Texas A&M

    Gamecocks Lose Season Opener 52-28 to Texas A&M

    Thursday, August 28 2014 9:52 PM EDT2014-08-29 01:52:41 GMT
    Aggies beat USC 52-28 on Thursday night ending the Gamecocks' 18 game home winning streak.Aggies beat USC 52-28 on Thursday night ending the Gamecocks' 18 game home winning streak.
    No. 21 Texas A&M beats No. 9 South Carolina 52-28 in USC's home opener on Thursday night, ending the Gamecocks' 18-game home win streak.
    No. 21 Texas A&M beats No. 9 South Carolina 52-28 in USC's home opener on Thursday night, ending the Gamecocks' 18-game home win streak.
  • Pedestrian Dead After Deputy Involved Wreck In Greenville Co.

    Pedestrian Dead After Deputy Involved Wreck In Greenville Co.

    Thursday, August 28 2014 9:10 PM EDT2014-08-29 01:10:52 GMT
    Investigators say the man was crossing the road when he walked in front of a car at Augusta Road and Old Augusta Road near Interstate 85 around 5:30 a.m. The victim was killed after being hit by several vehicles, including a deputy's.
    Investigators say the man was crossing the road when he walked in front of a car at Augusta Road and Old Augusta Road near Interstate 85 around 5:30 a.m. The victim was killed after being hit by several vehicles, including a deputy's.
Powered by WorldNow

250 International Dr.
Spartanburg, S.C. 29303

Telephone: 864.576.7777
Fax: 864.587.5430
Email: webmaster@wspa.com

Can't find something?
Powered by WorldNow
All content © Copyright 2000 - 2014 Media General Communications Holdings, LLC. A Media General Company.