Subcommittee on Oversight Ranking Member Torres Opening Remarks at the Joint Hearing on the Data Breach of D.C. Health Link

Washington, D.C. – Subcommittee on Oversight Ranking Member Norma Torres (D-CA) delivered the following opening remarks at the joint hearing on the data breach of D.C Health Link:

“Thank you to the Chair and I want to join my colleagues in welcoming Ms. Szpindor, Ms. Kofman. Thanks for coming before our committee today.

“The recent data breach to the D.C. Health Benefit Exchange compromised the personally identifiable information, including the names, birthdates, and Social Security numbers of more than 56,000 individuals jeopardizing their privacy and financial security.

“And as members and congressional staff seeking employer sponsored health insurance, we're required to enroll in the marketplaces created by the Affordable Care Act back in 2014.

“The affected universe of the data breach also included a significant number of individuals here on Capitol Hill.

“I understand those affected individuals include 17 members of Congress, 435 House staff, and more than 270 spouses and dependents.

“A significant breach like this one further demonstrates the importance of ensuring that all organizations have the necessary cybersecurity tools to combat cybercrime.

“Most recently, in my own home region of the Inland Empire, I learned about how hackers attacked a local 911 center.

“This is a reminder that all systems are fragile and at risk of hacking threats.

“Today's hearing provides us with an opportunity to examine how the D.C. Health Benefit Exchange and other similar organizations can better protect against potential cybersecurity risks and work to ensure that this will never happen again.

“Ms. Kofman I was pleased to hear in your testimony that DC Health Link is undergoing a comprehensive security review and assessment of your entire system, and I look forward to hearing more about what you've learned so far, and I urge you to continue to work through any remaining cybersecurity vulnerabilities, including those susceptible to both malicious activity and simple human error.

“Ms. Szpindor, in the days after the breach, you clarified to members in the Committee on the House Administration the breach did not include any systems and stated that the portal used by the House to communicate with the D.C. exchange was well protected.

“And as you mention in your testimony, the House is often a target of cyber attacks, and I look forward to hearing more about how our administrative professionals at CAO continue to work to protect the House from cyber threats, ensuring that we have the necessary protections in place to avoid further breaches.

“Finally, I would like to thank the CAO, the Capitol Police, the House Sergeant at Arms and the FBI for their work on this matter in the days and weeks after the data breach.

“And with that, I yield back to the Chair.”

###