The CMS stated in a press release dated Oct. 19 that its personnel had monitored âanomalous activitiesâ on the Direct Enrollment pathway, a system used by insurance brokers and agents to guide clients applying for health coverage. The agency subsequently began an investigation into the anomaly on Oct. 13 and confirmed the data breach by Oct. 16.
The CMS said it has since deactivated the Direct Enrollment system as well as the agent and broker accounts linked to the suspicious activities.
Meanwhile, Seema Verma, administrator for the CMS, said that her agency is in the process of identifying the individuals affected by the attack, adding that â[we] will continue to work around the clock to help those potentially impacted and ensure the protection of consumer information.â
Verma also assured the public that enrollment can still be carried out through the Marketplace Call Center and the HealthCare.gov website, which continue to be operational.