HIPAA Be Damned … Obamacare’s HealthCare.gov Users Warn of Security Risk, Breach of Privacy


What else could this disastrous web site possibly do wrong?

Obamacare’s Healthcare.gov website discloses eligibility letters written to other applicants. Hmm, thanks for the break of privacy of unsuspecting individuals who signed onto Healthcare.gov.  The security flaw disclosed eligibility letters addressed to individuals from another state. Just curious, was a data disclosure made to HHS in compliance with HIPAA privacy rules like many healthcare government contractors are supposed to do within a specified amount of time? Or do your own rules not apply to yourself?

As reported at The Weekly Standard, below is a screen shot of one of the “eligibility letters” he wasn’t supposed to receive.

Obamacare_eligibility letters

From The Foundry:

Justin Hadley logged on to HealthCare.gov to evaluate his insurance options after his health plan was canceled. What he discovered was an apparent security flaw that disclosed eligibility letters addressed to individuals from another state.

“I was in complete shock,” said Hadley, who contacted Heritage after becoming alarmed at the breach of privacy.

Hadley, a North Carolina father, buys his insurance on the individual market. His insurance company, Blue Cross Blue Shield of North Carolina, directed him to HealthCare.gov in a cancellation letter he received in September.

After multiple attempts to access the problem-plagued website, Hadley finally made it past the registration page Thursday. That’s when he was greeted with downloadable letters about eligibility — for two people in South Carolina.

The document shows that administration officials at the Centers for Medicare and Medicaid Services were concerned that a lack of testing posed a potentially “high” security risk for the HealthCare.gov website serving 36 states.

Security Risk

Last week, the Associated Press disclosed a government memo revealing the “high” security risk for HealthCare.gov. Those concerns surfaced at Wednesday’s hearing with HHS Secretary Kathleen Sebelius, who claimed the system was secure.

HHS spokeswoman Joanne Peters told the AP, “When consumers fill out their online … applications, they can trust that the information they’re providing is protected by stringent security standards and that the technology underlying the application process has been tested and is secure.”

However, that didn’t stop members of Congress from voicing alarm.

“You accepted a risk on behalf of every user … that put their personal financial information at risk,” Representative Mike Rogers (R-MI) told Sebelius. “Amazon would never do this. ProFlowers would never do this. Kayak would never do this. This is completely an unacceptable level of security.”

If you liked this post, you may also like these:

  • AOL Instant Message Maybe Not A OK
  • “White Hat” Hacker David Kennedy Says … “No Security Ever Built into Obamacare Web Site”
  • Do Not Open Microsoft Security Alert Email
  • Daily Commentary – Monday, January 20, 2014 – Baby Faced Russian Teen Likely Suspect in Security Breach Software
  • TSA Video Cameras at Newark Liberty International Airport Not Recording at Time of Security Breach

  • Comments

    3 Responses to “HIPAA Be Damned … Obamacare’s HealthCare.gov Users Warn of Security Risk, Breach of Privacy”

    1. Obamacare Website User Given Eligibility Letters Of Others | The Lonely Conservative on November 3rd, 2013 12:17 pm

      [...] H/T Scared Monkeys [...]

    2. A Texas Grandfather on November 3rd, 2013 1:52 pm

      The entire design is faulty. It did not take into consideration all of the existing laws concerning privacy.

      Congress should demand that the site be decommissioned until an in depth review by real professional system designers is accomplished. At least a year delay should be mandated to accomplish the review, new design and implementation. All the existing contracts should be cancelled and new contracts written for the new work.

      People need to stay off the site until this is done.

    3. Super dave on November 3rd, 2013 5:24 pm

      This is not all folks. fema is now declaring neighborhoods in certain areas of texas that have never flooded in this state’s history flood plain areas. This is happening as i type here to a friend and basically her whole neighborhood.
      They are being forced to purchase flood insurance from fema at several hundred dollars a month. She has contacted the government and of course, no response from the democrat commies.
      How long do we suffer ? Obama is systematically demoralizing our military and according to high ranking retired commanders, will terminate all military who do not agree to bow to the kenyan a$$hole.

    Leave a Reply

    Support Scared Monkeys! make a donation.

    • NEWS (breaking news alerts or news tips)
    • Red (comments)
    • Dugga (technical issues)
    • Dana (radio show comments)
    • Klaasend (blog and forum issues)
    E-mail It