Although, CMS didn’t reveal much details about the types of information lost in this attack, one can certainly speculate the extent of the data by the fact that the hackers compromised the HealthCare.gov system’s sign-up process, which requires the customers to enter explicit personal details and social security numbers.
According to the CMS, they noticed some suspicious activity in the Direct Enrollment Pathway meant for the agents and brokers. Upon investigations, they found that the hackers have allegedly stolen 75,000 records from the system.
