A government report revealed that CMS has failed to protect healthcare.gov. The site that millions use to purchase health insurance under the ACA logged 316 cybersecurity incidents during an 18-month period.

The CMS has also failed to adequately monitor security controls at state-based insurance marketplaces, according to the watchdog. In a previous report, the GAO found three states with “significant weaknesses,” including insufficient encryption and inadequately configured firewalls.

…