onedef92
11-04-2013, 12:19pm
Midlands man has personal information compromised on healthcare.gov
Posted: Nov 03, 2013 6:22 PM EST
Updated: Nov 04, 2013 11:23 AM EST
COLUMBIA, SC (WIS) - About a month ago, attorney Tom Dougall logged on to healthcare.gov to browse for cheaper insurance for him and his wife.
On Friday, the last thing he expected to hear on his voicemail was a man from North Carolina who says he can access all of Tom's personal information.
Dougall says he thought it was a scam until he realized his privacy had been breached.
"I believe somehow the ACA, the Healthcare website has sent me your information, is what it looks like," said Justin, a North Carolina man who could access Tom's information on healthcare.gov. "I think there's a problem with the wrong information getting to the wrong people."
At first, Dougall didn't know what to think.
"We received a phone call from a gentleman named Justin in North Carolina who informed me that he had gone on the healthcare.gov website and when he logged in under his log in and password, he received a document of all of my and my wife's personal information," Dougall said.
Dougall said he thought it was a ploy.
"Initially I was concerned because I didn't know if this was some guy who was scamming me or if in fact this was a guy who really had my personal information," he said.
Justin even provided proof, documents containing Tom's personal information and screen shots of the website.
"And you can see that he's actually signed in as Justin and it tells him he has notices about his marketplace eligibility and to download those and when he downloads it, the next screen shot shows him my personal information," he said.
Dougall said now Justin cannot sign up for the coverage he needs because he's been blocked by Tom's personal information.
"We're told constantly that it's a secure system and it's not, obviously," he said.
Having lived through one security breach in the State of South Carolina with the Department of Revenue, Dougall wonders what would happen if a professional hacker tried to log on.
"I tried to call healthcare.gov last night and they have no procedure whatsoever to handle security breaches," he said. "All they can do is try to sell you a policy."
Dougall has also contacted his Congressmen.
He says he's calling the Department of Health and Human Services directly on Monday.
"They're so concerned with trying to fix the problems they currently have that they refuse to acknowledge or won't acknowledge that there's been a major breach," he said.
In the meantime, Tom does not know how to secure his information.
"I think there's a problem with the wrong information getting to the wrong people," he said.
We reached out the U.S. Department of Health and Human Services, they responded via email Sunday afternoon asking for more information about what happened to Tom and Justin.
Late Sunday, an HHS official said a security team is working to fix the issue. "We are aware of this issue and it is on our punch list of fixes, scheduled to be addressed in the very near future."
They added consumers can call the toll free number or access the online chat tool that is available 24/7.
Posted: Nov 03, 2013 6:22 PM EST
Updated: Nov 04, 2013 11:23 AM EST
COLUMBIA, SC (WIS) - About a month ago, attorney Tom Dougall logged on to healthcare.gov to browse for cheaper insurance for him and his wife.
On Friday, the last thing he expected to hear on his voicemail was a man from North Carolina who says he can access all of Tom's personal information.
Dougall says he thought it was a scam until he realized his privacy had been breached.
"I believe somehow the ACA, the Healthcare website has sent me your information, is what it looks like," said Justin, a North Carolina man who could access Tom's information on healthcare.gov. "I think there's a problem with the wrong information getting to the wrong people."
At first, Dougall didn't know what to think.
"We received a phone call from a gentleman named Justin in North Carolina who informed me that he had gone on the healthcare.gov website and when he logged in under his log in and password, he received a document of all of my and my wife's personal information," Dougall said.
Dougall said he thought it was a ploy.
"Initially I was concerned because I didn't know if this was some guy who was scamming me or if in fact this was a guy who really had my personal information," he said.
Justin even provided proof, documents containing Tom's personal information and screen shots of the website.
"And you can see that he's actually signed in as Justin and it tells him he has notices about his marketplace eligibility and to download those and when he downloads it, the next screen shot shows him my personal information," he said.
Dougall said now Justin cannot sign up for the coverage he needs because he's been blocked by Tom's personal information.
"We're told constantly that it's a secure system and it's not, obviously," he said.
Having lived through one security breach in the State of South Carolina with the Department of Revenue, Dougall wonders what would happen if a professional hacker tried to log on.
"I tried to call healthcare.gov last night and they have no procedure whatsoever to handle security breaches," he said. "All they can do is try to sell you a policy."
Dougall has also contacted his Congressmen.
He says he's calling the Department of Health and Human Services directly on Monday.
"They're so concerned with trying to fix the problems they currently have that they refuse to acknowledge or won't acknowledge that there's been a major breach," he said.
In the meantime, Tom does not know how to secure his information.
"I think there's a problem with the wrong information getting to the wrong people," he said.
We reached out the U.S. Department of Health and Human Services, they responded via email Sunday afternoon asking for more information about what happened to Tom and Justin.
Late Sunday, an HHS official said a security team is working to fix the issue. "We are aware of this issue and it is on our punch list of fixes, scheduled to be addressed in the very near future."
They added consumers can call the toll free number or access the online chat tool that is available 24/7.