WASHINGTON – The battle over the government’s problem-plagued health care website escalated on Wednesday as Republicans attacked the Obama administration over an array of emerging issues involving the health law, including potential security vulnerabilities on the site and complaints from Americans facing cancellations of existing policies.
At a congressional hearing, Health and Human Services Secretary Kathleen Sebelius apologized for the flaws of HealthCare.gov, which was not functioning for most of the day. Conceding that navigating the health portal has been “a miserably frustrating experience for way too many Americans,” Sebelius told lawmakers: “Hold me accountable for the debacle. I’m responsible.”
President Obama, meanwhile, acknowledged for the first time that some Americans will have to switch health plans under the law. But he said these people now have “cut-rate plans” from “bad-apple insurers” – a situation the health-care law was designed to change. He urged consumers to “shop around” to “get a better deal” under the law.
The cancellations have become a big issue for Republicans, in part because Obama repeatedly had said that people would be able to keep their plans if they liked them.
Obama delivered his remarks Wednesday at Boston’s historic Faneuil Hall, where years ago his onetime Republican opponent, Mitt Romney, signed the state law that became a model for the federal health-care overhaul.
During the House Energy and Commerce Committee hearing, which featured Sebelius as the sole witness, critical Republicans seized on evidence that the administration knew that HealthCare.gov had security flaws days before it went live. Rep. Mike Rogers, R-Mich., quoted from a Sept. 27 memo to Medicare administrator Marilyn Tavenner from her staff that warned of “inherent security risks” stemming from inadequate testing.
“You accepted a risk on behalf of every user ... that put their personal financial information at risk because you did not even have the most basic end-to-end test on security of this system,” Rogers said.
Sebelius acknowledged that HealthCare.gov launched with at least one security weakness that would allow hackers to obtain personal information entered into the site. But no breach occurred, she said, and the problem has since been corrected.
“It was a theoretical problem that was immediately fixed,” Sebelius said.
At a briefing later in the day, Julie Bataille, a spokeswoman for the Centers for Medicare and Medicaid, the agency within HHS that is charge of HealthCare.gov, said the site was still undergoing security testing. But she said consumer information is safe in the meantime.
Separate security testing for the website’s federal data hub, which helps determine eligibility for financial aid by verifying data with many federal agencies, has been completed and the hub has a permanent security certification, Bataille said. She could not immediately answer why one part of the system had completed security testing and another part had not.
Sebelius, in her testimony, also addressed what she said was a key flaw in the health-law technology: transmissions of inaccurate or incomplete enrollment data to health plans. Without accurate information, insurers will not know who has signed up for coverage and who should be billed.
“The system isn’t functioning, so we’re not getting that reliable data,” Sebelius said when pressed to provide enrollment numbers. “We have prioritized that specific fix.”
Republican lawmakers also asked Sebelius about an Oct. 11 slide presentation provided to lawmakers by the lead contractor on the website, CGI Federal. One slide showed that nearly half of the people applying for government subsidies were getting incorrect information about their eligibility. And in about a quarter of all applications, the system was duplicating certain records, leading to problems such as a person being recorded as having four spouses.
Some health plans have resorted to checking each enrollment file by hand rather than leaving it to automatic processing.
Legislators also seized on the wave of cancellation notices that have begun arriving in hundreds of thousands of mailboxes across the country.
On Wednesday, several Republican lawmakers introduced legislation they dubbed the “If You Like Your Health Care Plan You Can Keep It Act.”
Members of the Energy and Commerce panel took turns telling stories about individuals from their districts who have received notices from their insurance companies stating that their plans are being canceled.
Rep. Cory Gardner, R-Colo., told Sebelius that he and his family buy their health insurance on the private market and that he, like other people in his situation, got a notice saying his plan was being discontinued this year. He said he chose to reject his congressional insurance to be more like people in his district.
“Why aren’t you losing your insurance?” he demanded of Sebelius. “Why won’t you go into this exchange?”
Through midafternoon Wednesday, the HealthCare.gov website was still down because of a partial outage Tuesday night at the data center that hosts the website, said Bataille, the Medicare spokeswoman.