Healthcare.gov test server hacked

The Wall Street Journal cites unnamed federal officials as saying that a hacker gained access and uploaded malicious software to a server that is part of Healthcare.gov. The attack occurred in July and was discovered on August 25 during a daily security scan.

The officials say that the server is used only to test code for the site. The attacker gained no access to consumers’ personal data and no such data was on the server. But because the server was not meant to be connected to the Internet, it was protected with a default password.