“White Hat” Hacker David Kennedy Says … “No Security Ever Built into Obamacare Web Site”

WHAT A MESS … Get ready for the Identity Theft that is going to be a result of the Obamacare web site where no security was ever put in place …

From CNBC comes the following frightening revelations. The security issues with the beleaguered web site are even worse than thought. David Kennedy, a cybersecurity expert told CNBC the unthinkable, ”When you develop a website, you develop it with security in mind. And it doesn’t appear to have happened this time.”  He was then asked whether the site posed a risk to individuals personal information. Kennedy responded, putting your information on the Healthcare.gov web site puts yourself at risk. Since it is on the federal level, the government does not have to disclose that they have been hacked or a breach has occurred.

It could take a year to secure the risk of “high exposures” of personal information on the federal Obamacare online exchange, a cybersecurity expert told CNBC on Monday.

“When you develop a website, you develop it with security in mind. And it doesn’t appear to have happened this time,” said David Kennedy, a so-called “white hat” hacker who tests online security by breaching websites. He testified on Capitol Hill about the flaws of HealthCare.gov last week.

“It’s really hard to go back and fix the security around it because security wasn’t built into it,” said Kennedy, chief executive of TrustedSec. “We’re talking multiple months to over a year to at least address some of the critical-to-high exposures on the website itself.”

How did this government allow such a colossal failure to go forward that would put so many millions of Americans at risk of ID theft? In one respect, they are lucky that it was so poorly constructed that people could not get on to enroll and in turn have their info hacked.

HHS-Run Website Hacked … Now Selling NFL Jerseys, Ugg Boots, Armani Fragrances

Does this give those that need to sign up for Obamacare a warm fuzzy …

As reported at the The Weekly Standard, a portion of the website of the Substance Abuse and Mental Health Services Administration (SAMHSA), an agency of HHS, was apparently hacked as long as two months ago. Makes you want to trust the Healthcare.gov web page and give the government your personal information, doesn’t it?

A portion of the website of the Substance Abuse and Mental Health Services Administration (SAMHSA) was apparently hacked as long as two months ago.  SAMHSA is an agency of the Department of Health and Human Services (HHS). HHS also runs the new Obamacare insurance marketplace, Healthcare.gov.

Dozens of pages hawking retail merchandise have been uploaded to the SAMHSA site, ranging from NFL jerseys to Ugg shoes to Armani fragrances.  Screen captures of the various pages are shown here:

UPDATE: Shortly after this story was posted, the site nace.samhsa.gov returned an error message saying that the site could not be found.  Later, the following message appeared on the site (misspelling included): “This site is undgoing maintenance. We are sorry for any inconvenience this has caused you.” Here’s a current screen capture: