Attackers "used the front door," according to acting CMS CIO Rajiv Uppal, and had the ability to access a ton of PII.

CMS says it's working to restore the breached portal and that the incident doesn't affect the operation of HealthCare.gov or open enrollment.