Government officials have confirmed that the HealthCare.gov website is indeed vulnerable to the Heartbleed bug, and those that have signed up for Obamacare should change their passwords.
There was no indication that the site had been compromised, but officials still recommend changing the password to be safe. Other government sites may have been vulnerable, as well, but a full review is still ongoing, say the officials.
Heartbleed, which is a massive flaw in the OpenSSL website encryption technology used by a major portion of the Web, has been dominating headlines recently as major companies rush to patch their services and recommend to users that their passwords and other info be changed.
"While there's no indication that any personal information has ever been at risk, we have taken steps to address Heartbleed issues and reset consumers' passwords out of an abundance of caution," reads the website.
Phyllis Schneck, Department of Homeland Security deputy undersecretary for cybersecurity and communications also added: "We will continue to focus on this issue until government agencies have mitigated the vulnerability in their systems. And we will continue to adapt our response if we learn about additional issues created by the vulnerability."
Source:
Healthcare.gov
Heartbleed, which is a massive flaw in the OpenSSL website encryption technology used by a major portion of the Web, has been dominating headlines recently as major companies rush to patch their services and recommend to users that their passwords and other info be changed.
"While there's no indication that any personal information has ever been at risk, we have taken steps to address Heartbleed issues and reset consumers' passwords out of an abundance of caution," reads the website.
Phyllis Schneck, Department of Homeland Security deputy undersecretary for cybersecurity and communications also added: "We will continue to focus on this issue until government agencies have mitigated the vulnerability in their systems. And we will continue to adapt our response if we learn about additional issues created by the vulnerability."
Source:
Healthcare.gov
