HealthCare.gov's registration system was compromised in early October 2018. The attackers were able to access the personal data of about 75,000 people, CMS (Centers for Medicare & Medicaid Services) Administrator Seema Verma announced on Friday, October 19, 2018.
The compromised system is used by agents and brokers to register customers directly. All other registration systems functioned normally.
Jonathan Monroe, spokesperson for CMS, said they have been working to implement new security measures to protect their customers' information. He also stated that CMS has been able to confirm that no banking, federal tax or protected health information was disclosed.