{"id":15798,"date":"2016-03-25T17:50:21","date_gmt":"2016-03-25T17:50:21","guid":{"rendered":"https:\/\/one.sightlinemg.com\/federaltimes\/uncategorized\/2016\/03\/25\/poor-controls-leave-healthcare-gov-state-exchanges-vulnerable\/"},"modified":"2026-08-08T04:37:41","modified_gmt":"2026-08-08T04:37:41","slug":"poor-controls-leave-healthcare-gov-state-exchanges-vulnerable","status":"publish","type":"post","link":"https:\/\/one.sightlinemg.com\/federaltimes\/management\/2016\/03\/25\/poor-controls-leave-healthcare-gov-state-exchanges-vulnerable\/","title":{"rendered":"Poor controls leave Healthcare.gov, state exchanges vulnerable"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\">Since its inception, Healthcare.gov has been a prime target for hackers looking to gather sensitive information on American citizens. While the system has hit some bumps along the way, there has yet to be a significant breach and exfiltration of data, according to a recent report from the Government Accountability Office.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">However, it might just be a matter of time, as GAO investigators found a number of cybersecurity weaknesses in the system.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Download:\u00a0<\/strong><a href=\"http:\/\/www.gao.gov\/assets\/680\/676003.pdf\">Actions Needed to Enhance Information Security and Privacy Controls<\/a><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Healthcare.gov systems suffered 316 security incidents between its launch in October 2013 and March 2015, according to data supplied by the Centers for Medicare and Medicaid Services (CMS), which manages the program.<\/p>\n\n\n\n\n\n<p class=\"wp-block-paragraph\">Luckily, &#8220;None of the incident included evidence that an outside attacker had successfully compromised sensitive data, such as personally identifiable information,&#8221; according to GAO. And while CMS has taken steps to prevent such a breach from occurring, there are some outstanding vulnerabilities that could be leveraged by attackers.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Namely, GAO found weaknesses in three areas where CMS&#8217;s data hub connects to external partners \u2014\u00a0state exchanges, other federal agencies, insurance companies and the like \u2014\u00a0that attackers could leverage to gain access to sensitive information:<\/p>\n\n\n\n<ul class=\"wp-block-list\"><li>Insufficiently restricted administrator privileges for data hub systems.<\/li><li>Inconsistent application of security patches.<\/li><li>Insecure configuration of an administrative network.<\/li><\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">CMS has tasked the deputy CISO to form a task force to examine these weaknesses and find solutions.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">GAO was told &#8220;meetings will be held on at least a weekly basis to monitor milestone dates, discuss activities and identify potential barriers to resolution of any given weakness.&#8221;<\/p>\n\n\n\n\n\n<p class=\"wp-block-paragraph\">In a separate report with a limited release due to the sensitive nature of its findings, GAO offers 27 recommendations for shoring up Healthcare.gov systems.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">However, the publicly released report also highlights the vulnerabilities presented by the state-managed exchanges.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">&#8220;CMS assigned roles and responsibilities to various oversight entities, met regularly with state officials and developed a reporting tool to monitor performance,&#8221; GAO notes. &#8220;However, it has not defined specific oversight procedures, such as the timing for when each activity should occur, or what follow-up corrective actions should be performed if deficiencies are identified.&#8221;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">GAO also dinged CMS for only requiring testing of these security controls every three years, rather than setting up procedures for continuous monitoring and annual testing.<\/p>\n\n\n\n\n\n<p class=\"wp-block-paragraph\">Along with internal systems, investigators also found critical weaknesses with three of the state-run marketplaces \u2014\u00a0including &#8220;insufficient encryption and inadequately configured firewalls&#8221; \u2014\u00a0that could allow an attack to steal data or make lateral moves through the system.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">GAO said it is incumbent on CMS to make sure those exchanges are properly secured.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">&#8220;Without well-defined oversight procedures and more frequent monitoring of security controls, CMS has less assurance that state-based marketplaces are adequately protected against risks to the sensitive data they collect, process and maintain,&#8221; the report states.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">CMS officials agreed with this and all the recommendations made in the public and limited-release reports and offered details on how they plan to remediate these issues.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Healthcare.gov hasn&#8217;t had a significant hacking incident yet but critical weaknesses need to be addressed, according to GAO.<\/p>\n","protected":false},"author":7,"featured_media":18797,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"_yoast_wpseo_meta-robots-noindex":"","_yoast_wpseo_meta-robots-nofollow":"","_yoast_wpseo_canonical":"","_acf":"","_yoast_wpseo_primary_category":15,"_jetpack_feature_clip_id":0,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","_smg_distribution_targets":[]},"categories":[15,14],"tags":[],"coauthors":[2349],"class_list":["post-15798","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-management","category-it-networks"],"acf":{"subheadline":"","legacy_arc_id":"WIQ4YJPIS5HPFDHOBS44X756DM","arc_canonical_url":"\/management\/2016\/03\/25\/poor-controls-leave-healthcare-gov-state-exchanges-vulnerable\/","remove_feature_photo":false,"is_sponsored":false,"subtype":"","redirect_url":"","disable_inline_ads":false,"native_logo_pretext":"Presented By:"},"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v26.0 (Yoast SEO v28.1) - https:\/\/yoast.com\/product\/yoast-seo-premium-wordpress\/ -->\n<title>Poor controls leave Healthcare.gov, state exchanges vulnerable - Federal Times<\/title>\n<meta name=\"description\" content=\"Healthcare.gov hasn&#039;t had a significant hacking incident yet but critical weaknesses need to be addressed, according to GAO.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/one.sightlinemg.com\/federaltimes\/management\/2016\/03\/25\/poor-controls-leave-healthcare-gov-state-exchanges-vulnerable\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Poor controls leave Healthcare.gov, state exchanges vulnerable\" \/>\n<meta property=\"og:description\" content=\"Healthcare.gov hasn&#039;t had a significant hacking incident yet but critical weaknesses need to be addressed, according to GAO.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/one.sightlinemg.com\/federaltimes\/management\/2016\/03\/25\/poor-controls-leave-healthcare-gov-state-exchanges-vulnerable\/\" \/>\n<meta property=\"og:site_name\" content=\"Federal Times\" \/>\n<meta property=\"article:published_time\" content=\"2016-03-25T17:50:21+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-08-08T04:37:41+00:00\" \/>\n<meta name=\"author\" content=\"Aaron Boyd\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Aaron Boyd\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"2 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\n\t    \"@context\": \"https:\\\/\\\/schema.org\",\n\t    \"@graph\": [\n\t        {\n\t            \"@type\": \"Article\",\n\t            \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/federaltimes\\\/management\\\/2016\\\/03\\\/25\\\/poor-controls-leave-healthcare-gov-state-exchanges-vulnerable\\\/#article\",\n\t            \"isPartOf\": {\n\t                \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/federaltimes\\\/management\\\/2016\\\/03\\\/25\\\/poor-controls-leave-healthcare-gov-state-exchanges-vulnerable\\\/\"\n\t            },\n\t            \"author\": {\n\t                \"name\": \"migration\",\n\t                \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/federaltimes\\\/#\\\/schema\\\/person\\\/cc76c831bb37a926738c8391fca7a3b1\"\n\t            },\n\t            \"headline\": \"Poor controls leave Healthcare.gov, state exchanges vulnerable\",\n\t            \"datePublished\": \"2016-03-25T17:50:21+00:00\",\n\t            \"dateModified\": \"2026-08-08T04:37:41+00:00\",\n\t            \"mainEntityOfPage\": {\n\t                \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/federaltimes\\\/management\\\/2016\\\/03\\\/25\\\/poor-controls-leave-healthcare-gov-state-exchanges-vulnerable\\\/\"\n\t            },\n\t            \"wordCount\": 504,\n\t            \"commentCount\": 0,\n\t            \"publisher\": {\n\t                \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/federaltimes\\\/#organization\"\n\t            },\n\t            \"image\": {\n\t                \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/federaltimes\\\/management\\\/2016\\\/03\\\/25\\\/poor-controls-leave-healthcare-gov-state-exchanges-vulnerable\\\/#primaryimage\"\n\t            },\n\t            \"thumbnailUrl\": \"https:\\\/\\\/one.sightlinemg.com\\\/wp-content\\\/uploads\\\/2026\\\/08\\\/635624543670286329-hhs2jpg.jpg\",\n\t            \"articleSection\": [\n\t                \"Inside the Agencies\",\n\t                \"IT &amp; Networks\"\n\t            ],\n\t            \"inLanguage\": \"en-US\",\n\t            \"potentialAction\": [\n\t                {\n\t                    \"@type\": \"CommentAction\",\n\t                    \"name\": \"Comment\",\n\t                    \"target\": [\n\t                        \"https:\\\/\\\/one.sightlinemg.com\\\/federaltimes\\\/management\\\/2016\\\/03\\\/25\\\/poor-controls-leave-healthcare-gov-state-exchanges-vulnerable\\\/#respond\"\n\t                    ]\n\t                }\n\t            ]\n\t        },\n\t        {\n\t            \"@type\": \"WebPage\",\n\t            \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/federaltimes\\\/management\\\/2016\\\/03\\\/25\\\/poor-controls-leave-healthcare-gov-state-exchanges-vulnerable\\\/\",\n\t            \"url\": \"https:\\\/\\\/one.sightlinemg.com\\\/federaltimes\\\/management\\\/2016\\\/03\\\/25\\\/poor-controls-leave-healthcare-gov-state-exchanges-vulnerable\\\/\",\n\t            \"name\": \"Poor controls leave Healthcare.gov, state exchanges vulnerable - Federal Times\",\n\t            \"isPartOf\": {\n\t                \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/federaltimes\\\/#website\"\n\t            },\n\t            \"primaryImageOfPage\": {\n\t                \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/federaltimes\\\/management\\\/2016\\\/03\\\/25\\\/poor-controls-leave-healthcare-gov-state-exchanges-vulnerable\\\/#primaryimage\"\n\t            },\n\t            \"image\": {\n\t                \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/federaltimes\\\/management\\\/2016\\\/03\\\/25\\\/poor-controls-leave-healthcare-gov-state-exchanges-vulnerable\\\/#primaryimage\"\n\t            },\n\t            \"thumbnailUrl\": \"https:\\\/\\\/one.sightlinemg.com\\\/wp-content\\\/uploads\\\/2026\\\/08\\\/635624543670286329-hhs2jpg.jpg\",\n\t            \"datePublished\": \"2016-03-25T17:50:21+00:00\",\n\t            \"dateModified\": \"2026-08-08T04:37:41+00:00\",\n\t            \"description\": \"Healthcare.gov hasn't had a significant hacking incident yet but critical weaknesses need to be addressed, according to GAO.\",\n\t            \"breadcrumb\": {\n\t                \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/federaltimes\\\/management\\\/2016\\\/03\\\/25\\\/poor-controls-leave-healthcare-gov-state-exchanges-vulnerable\\\/#breadcrumb\"\n\t            },\n\t            \"inLanguage\": \"en-US\",\n\t            \"potentialAction\": [\n\t                {\n\t                    \"@type\": \"ReadAction\",\n\t                    \"target\": [\n\t                        \"https:\\\/\\\/one.sightlinemg.com\\\/federaltimes\\\/management\\\/2016\\\/03\\\/25\\\/poor-controls-leave-healthcare-gov-state-exchanges-vulnerable\\\/\"\n\t                    ]\n\t                }\n\t            ]\n\t        },\n\t        {\n\t            \"@type\": \"ImageObject\",\n\t            \"inLanguage\": \"en-US\",\n\t            \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/federaltimes\\\/management\\\/2016\\\/03\\\/25\\\/poor-controls-leave-healthcare-gov-state-exchanges-vulnerable\\\/#primaryimage\",\n\t            \"url\": \"https:\\\/\\\/one.sightlinemg.com\\\/wp-content\\\/uploads\\\/2026\\\/08\\\/635624543670286329-hhs2jpg.jpg\",\n\t            \"contentUrl\": \"https:\\\/\\\/one.sightlinemg.com\\\/wp-content\\\/uploads\\\/2026\\\/08\\\/635624543670286329-hhs2jpg.jpg\"\n\t        },\n\t        {\n\t            \"@type\": \"BreadcrumbList\",\n\t            \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/federaltimes\\\/management\\\/2016\\\/03\\\/25\\\/poor-controls-leave-healthcare-gov-state-exchanges-vulnerable\\\/#breadcrumb\",\n\t            \"itemListElement\": [\n\t                {\n\t                    \"@type\": \"ListItem\",\n\t                    \"position\": 1,\n\t                    \"name\": \"Home\",\n\t                    \"item\": \"https:\\\/\\\/one.sightlinemg.com\\\/federaltimes\\\/\",\n\t                    \"ad_zone\": \"home\"\n\t                },\n\t                {\n\t                    \"@type\": \"ListItem\",\n\t                    \"position\": 2,\n\t                    \"name\": \"Inside the Agencies\",\n\t                    \"item\": \"https:\\\/\\\/one.sightlinemg.com\\\/federaltimes\\\/management\\\/\",\n\t                    \"ad_zone\": \"management\"\n\t                },\n\t                {\n\t                    \"@type\": \"ListItem\",\n\t                    \"position\": 3,\n\t                    \"name\": \"Poor controls leave Healthcare.gov, state exchanges vulnerable\"\n\t                }\n\t            ]\n\t        },\n\t        {\n\t            \"@type\": \"WebSite\",\n\t            \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/federaltimes\\\/#website\",\n\t            \"url\": \"https:\\\/\\\/one.sightlinemg.com\\\/federaltimes\\\/\",\n\t            \"name\": \"Federal Times\",\n\t            \"description\": \"Federal Times\",\n\t            \"publisher\": {\n\t                \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/federaltimes\\\/#organization\"\n\t            },\n\t            \"potentialAction\": [\n\t                {\n\t                    \"@type\": \"SearchAction\",\n\t                    \"target\": {\n\t                        \"@type\": \"EntryPoint\",\n\t                        \"urlTemplate\": \"https:\\\/\\\/one.sightlinemg.com\\\/federaltimes\\\/?s={search_term_string}\"\n\t                    },\n\t                    \"query-input\": {\n\t                        \"@type\": \"PropertyValueSpecification\",\n\t                        \"valueRequired\": true,\n\t                        \"valueName\": \"search_term_string\"\n\t                    }\n\t                }\n\t            ],\n\t            \"inLanguage\": \"en-US\"\n\t        },\n\t        {\n\t            \"@type\": \"Organization\",\n\t            \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/federaltimes\\\/#organization\",\n\t            \"name\": \"Federal Times\",\n\t            \"url\": \"https:\\\/\\\/one.sightlinemg.com\\\/federaltimes\\\/\",\n\t            \"logo\": {\n\t                \"@type\": \"ImageObject\",\n\t                \"inLanguage\": \"en-US\",\n\t                \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/federaltimes\\\/#\\\/schema\\\/logo\\\/image\\\/\",\n\t                \"url\": \"https:\\\/\\\/one.sightlinemg.com\\\/wp-content\\\/uploads\\\/2026\\\/06\\\/federal-logo-white.png\",\n\t                \"contentUrl\": \"https:\\\/\\\/one.sightlinemg.com\\\/wp-content\\\/uploads\\\/2026\\\/06\\\/federal-logo-white.png\",\n\t                \"caption\": \"Federal Times\"\n\t            },\n\t            \"image\": {\n\t                \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/federaltimes\\\/#\\\/schema\\\/logo\\\/image\\\/\"\n\t            }\n\t        },\n\t        {\n\t            \"@type\": \"Person\",\n\t            \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/federaltimes\\\/#\\\/schema\\\/person\\\/cc76c831bb37a926738c8391fca7a3b1\",\n\t            \"name\": \"migration\",\n\t            \"image\": {\n\t                \"@type\": \"ImageObject\",\n\t                \"inLanguage\": \"en-US\",\n\t                \"@id\": \"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/9e8d47be443ce94ce7fc357677b5f9c70235bb1f59e7267a102a74af58c04f59?s=96&d=mm&r=gcf4cb6ee0ec29e49e7a963234e4340ec\",\n\t                \"url\": \"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/9e8d47be443ce94ce7fc357677b5f9c70235bb1f59e7267a102a74af58c04f59?s=96&d=mm&r=g\",\n\t                \"contentUrl\": \"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/9e8d47be443ce94ce7fc357677b5f9c70235bb1f59e7267a102a74af58c04f59?s=96&d=mm&r=g\",\n\t                \"caption\": \"migration\"\n\t            },\n\t            \"url\": \"https:\\\/\\\/one.sightlinemg.com\\\/federaltimes\\\/author\\\/migration\\\/\"\n\t        }\n\t    ]\n\t}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Poor controls leave Healthcare.gov, state exchanges vulnerable - Federal Times","description":"Healthcare.gov hasn't had a significant hacking incident yet but critical weaknesses need to be addressed, according to GAO.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/one.sightlinemg.com\/federaltimes\/management\/2016\/03\/25\/poor-controls-leave-healthcare-gov-state-exchanges-vulnerable\/","og_locale":"en_US","og_type":"article","og_title":"Poor controls leave Healthcare.gov, state exchanges vulnerable","og_description":"Healthcare.gov hasn't had a significant hacking incident yet but critical weaknesses need to be addressed, according to GAO.","og_url":"https:\/\/one.sightlinemg.com\/federaltimes\/management\/2016\/03\/25\/poor-controls-leave-healthcare-gov-state-exchanges-vulnerable\/","og_site_name":"Federal Times","article_published_time":"2016-03-25T17:50:21+00:00","article_modified_time":"2026-08-08T04:37:41+00:00","author":"Aaron Boyd","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Aaron Boyd","Est. reading time":"2 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/one.sightlinemg.com\/federaltimes\/management\/2016\/03\/25\/poor-controls-leave-healthcare-gov-state-exchanges-vulnerable\/#article","isPartOf":{"@id":"https:\/\/one.sightlinemg.com\/federaltimes\/management\/2016\/03\/25\/poor-controls-leave-healthcare-gov-state-exchanges-vulnerable\/"},"author":{"name":"migration","@id":"https:\/\/one.sightlinemg.com\/federaltimes\/#\/schema\/person\/cc76c831bb37a926738c8391fca7a3b1"},"headline":"Poor controls leave Healthcare.gov, state exchanges vulnerable","datePublished":"2016-03-25T17:50:21+00:00","dateModified":"2026-08-08T04:37:41+00:00","mainEntityOfPage":{"@id":"https:\/\/one.sightlinemg.com\/federaltimes\/management\/2016\/03\/25\/poor-controls-leave-healthcare-gov-state-exchanges-vulnerable\/"},"wordCount":504,"commentCount":0,"publisher":{"@id":"https:\/\/one.sightlinemg.com\/federaltimes\/#organization"},"image":{"@id":"https:\/\/one.sightlinemg.com\/federaltimes\/management\/2016\/03\/25\/poor-controls-leave-healthcare-gov-state-exchanges-vulnerable\/#primaryimage"},"thumbnailUrl":"https:\/\/one.sightlinemg.com\/wp-content\/uploads\/2026\/08\/635624543670286329-hhs2jpg.jpg","articleSection":["Inside the Agencies","IT &amp; Networks"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/one.sightlinemg.com\/federaltimes\/management\/2016\/03\/25\/poor-controls-leave-healthcare-gov-state-exchanges-vulnerable\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/one.sightlinemg.com\/federaltimes\/management\/2016\/03\/25\/poor-controls-leave-healthcare-gov-state-exchanges-vulnerable\/","url":"https:\/\/one.sightlinemg.com\/federaltimes\/management\/2016\/03\/25\/poor-controls-leave-healthcare-gov-state-exchanges-vulnerable\/","name":"Poor controls leave Healthcare.gov, state exchanges vulnerable - Federal Times","isPartOf":{"@id":"https:\/\/one.sightlinemg.com\/federaltimes\/#website"},"primaryImageOfPage":{"@id":"https:\/\/one.sightlinemg.com\/federaltimes\/management\/2016\/03\/25\/poor-controls-leave-healthcare-gov-state-exchanges-vulnerable\/#primaryimage"},"image":{"@id":"https:\/\/one.sightlinemg.com\/federaltimes\/management\/2016\/03\/25\/poor-controls-leave-healthcare-gov-state-exchanges-vulnerable\/#primaryimage"},"thumbnailUrl":"https:\/\/one.sightlinemg.com\/wp-content\/uploads\/2026\/08\/635624543670286329-hhs2jpg.jpg","datePublished":"2016-03-25T17:50:21+00:00","dateModified":"2026-08-08T04:37:41+00:00","description":"Healthcare.gov hasn't had a significant hacking incident yet but critical weaknesses need to be addressed, according to GAO.","breadcrumb":{"@id":"https:\/\/one.sightlinemg.com\/federaltimes\/management\/2016\/03\/25\/poor-controls-leave-healthcare-gov-state-exchanges-vulnerable\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/one.sightlinemg.com\/federaltimes\/management\/2016\/03\/25\/poor-controls-leave-healthcare-gov-state-exchanges-vulnerable\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/one.sightlinemg.com\/federaltimes\/management\/2016\/03\/25\/poor-controls-leave-healthcare-gov-state-exchanges-vulnerable\/#primaryimage","url":"https:\/\/one.sightlinemg.com\/wp-content\/uploads\/2026\/08\/635624543670286329-hhs2jpg.jpg","contentUrl":"https:\/\/one.sightlinemg.com\/wp-content\/uploads\/2026\/08\/635624543670286329-hhs2jpg.jpg"},{"@type":"BreadcrumbList","@id":"https:\/\/one.sightlinemg.com\/federaltimes\/management\/2016\/03\/25\/poor-controls-leave-healthcare-gov-state-exchanges-vulnerable\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/one.sightlinemg.com\/federaltimes\/","ad_zone":"home"},{"@type":"ListItem","position":2,"name":"Inside the Agencies","item":"https:\/\/one.sightlinemg.com\/federaltimes\/management\/","ad_zone":"management"},{"@type":"ListItem","position":3,"name":"Poor controls leave Healthcare.gov, state exchanges vulnerable"}]},{"@type":"WebSite","@id":"https:\/\/one.sightlinemg.com\/federaltimes\/#website","url":"https:\/\/one.sightlinemg.com\/federaltimes\/","name":"Federal Times","description":"Federal Times","publisher":{"@id":"https:\/\/one.sightlinemg.com\/federaltimes\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/one.sightlinemg.com\/federaltimes\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/one.sightlinemg.com\/federaltimes\/#organization","name":"Federal Times","url":"https:\/\/one.sightlinemg.com\/federaltimes\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/one.sightlinemg.com\/federaltimes\/#\/schema\/logo\/image\/","url":"https:\/\/one.sightlinemg.com\/wp-content\/uploads\/2026\/06\/federal-logo-white.png","contentUrl":"https:\/\/one.sightlinemg.com\/wp-content\/uploads\/2026\/06\/federal-logo-white.png","caption":"Federal Times"},"image":{"@id":"https:\/\/one.sightlinemg.com\/federaltimes\/#\/schema\/logo\/image\/"}},{"@type":"Person","@id":"https:\/\/one.sightlinemg.com\/federaltimes\/#\/schema\/person\/cc76c831bb37a926738c8391fca7a3b1","name":"migration","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/9e8d47be443ce94ce7fc357677b5f9c70235bb1f59e7267a102a74af58c04f59?s=96&d=mm&r=gcf4cb6ee0ec29e49e7a963234e4340ec","url":"https:\/\/secure.gravatar.com\/avatar\/9e8d47be443ce94ce7fc357677b5f9c70235bb1f59e7267a102a74af58c04f59?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/9e8d47be443ce94ce7fc357677b5f9c70235bb1f59e7267a102a74af58c04f59?s=96&d=mm&r=g","caption":"migration"},"url":"https:\/\/one.sightlinemg.com\/federaltimes\/author\/migration\/"}]}},"jetpack_featured_media_url":"https:\/\/one.sightlinemg.com\/wp-content\/uploads\/2026\/08\/635624543670286329-hhs2jpg.jpg","jetpack_sharing_enabled":true,"distributor_meta":false,"distributor_terms":false,"distributor_media":false,"distributor_original_site_name":"Federal Times","distributor_original_site_url":"https:\/\/one.sightlinemg.com\/federaltimes","push-errors":false,"_links":{"self":[{"href":"https:\/\/one.sightlinemg.com\/federaltimes\/wp-json\/wp\/v2\/posts\/15798","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/one.sightlinemg.com\/federaltimes\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/one.sightlinemg.com\/federaltimes\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/one.sightlinemg.com\/federaltimes\/wp-json\/wp\/v2\/users\/7"}],"replies":[{"embeddable":true,"href":"https:\/\/one.sightlinemg.com\/federaltimes\/wp-json\/wp\/v2\/comments?post=15798"}],"version-history":[{"count":1,"href":"https:\/\/one.sightlinemg.com\/federaltimes\/wp-json\/wp\/v2\/posts\/15798\/revisions"}],"predecessor-version":[{"id":15809,"href":"https:\/\/one.sightlinemg.com\/federaltimes\/wp-json\/wp\/v2\/posts\/15798\/revisions\/15809"}],"wp:attachment":[{"href":"https:\/\/one.sightlinemg.com\/federaltimes\/wp-json\/wp\/v2\/media?parent=15798"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/one.sightlinemg.com\/federaltimes\/wp-json\/wp\/v2\/categories?post=15798"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/one.sightlinemg.com\/federaltimes\/wp-json\/wp\/v2\/tags?post=15798"},{"taxonomy":"author","embeddable":true,"href":"https:\/\/one.sightlinemg.com\/federaltimes\/wp-json\/wp\/v2\/coauthors?post=15798"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}