Vermont reports privacy violation on health care exchange

Summary:A single consumer received a copy of his application from an unknown third party.

Vermont state officials have confirmed a privacy breach on the state's health care exchange web site.


The exchange, named Vermont Health Connect, offers a health care insurance market under the federal Affordable Care Act.

According to a report filed with the federal Centers for Medicare and Medicaid Services (CMS) by state officials, on October 17 a consumer who had signed up on the web site received a copy of his application in the mail. On the back of the application was a handwritten note: "VERMONT HEALTH CONNECT IS NOT A SECURE WEBSITE!"

The Associated Press obtained the report, which did not name the consumer, after a request under the state public records law to the Department of Vermont Health Access.

There is no indication in any information released so far how the breach was accomplished.

Topics: Security, Government : US


Larry Seltzer has long been a recognized expert in technology, with a focus on mobile technology and security in recent years. He was most recently Editorial Director of BYTE, Dark Reading and Network Computing at UBM Tech. Prior to that he spent over a decade consulting and writing on technology subjects, primarily in the area of sec... Full Bio

Kick off your day with ZDNet's daily email newsletter. It's the freshest tech news and opinion, served hot. Get it.

Related Stories

The best of ZDNet, delivered

You have been successfully signed up. To sign up for more newsletters or to manage your account, visit the Newsletter Subscription Center.
Subscription failed.