Probe: HealthCare.gov website must boost security

Nonpartisan congressional investigators say the HealthCare.gov website has significant security weaknesses that could put Americans' personal information at risk.

The Government Accountability Office said Tuesday that the Obama administration must resolve more than 20 specific security issues related to who can get into the online system, who can make changes in it and what to do in case the complex network fails.

The GAO, which is the investigative arm of Congress, found that the administration took a risk going live with HealthCare.gov last fall when it was still not fully tested. Some testing was incomplete as of June.

Investigators said in testimony for a House committee hearing that the administration agreed with most of their recommendations.

HealthCare.gov was hacked last month, but no consumer information was stolen.