Cyber attacks on healthcare.gov reported to DHS

Share this article:

An investigation is under way on more than a dozen cyber attacks on healthcare.gov that have been reported to the Department of Homeland Security (DHS).

According to a report by Reuters, Roberta Stempfley, acting assistant secretary of the DHS' Office of Cybersecurity and Communications, testified before the House of Representatives Homeland Security Committee on Wednesday, indicating that the office had received “about 16” reports on cyber security incidents aimed at the site.

The attacks were unsuccessful and occurred from November 6 through November 8.

Additionally, Stempfley shared details on a recent overload of traffic to the site which is suspected by officials to be a denial-of-service attack.

Her testimony marks the first time the Obama administration has publicly addressed security threats to the website, which has received negative criticism over its security.

The site is a prime target for cyber criminals because the data it collects – including Social Security numbers, email addresses, phone numbers and birth dates – which can be used for identity theft.

Software tester, Ben Simo, recently brought to light a number of issues he discovered on the website, including what he says are a “series of steps that could be easily automated” to allow attackers to siphon usernames, password reset codes, security questions and email addresses from the system “without any kind of authentication.” Since then, many of the issues have been rectified.

Share this article:
You must be a registered member of SC Magazine to post a comment.

Sign up to our newsletters

More in News

As EMV deadline looms, industry looks to next ATM attack front

As EMV deadline looms, industry looks to next ...

Next year, EMV migration in the U.S. will inevitability change fraudsters' attack methods.

Kevin Mitnick to sell zero-day exploits

Kevin Mitnick's new venture will develop and procure zero-day exploits, then sell them for $100,000 or more.

FBI warns of potential cyber attacks launched by ISIS hacktivists

Following U.S. military airstrikes in the Middle East, the FBI has issued a warning regarding possible cyber threats aimed at U.S. networks and critical infrastructure by hacktivists in support of ISIS.