US Health Department Ensnared by MOVEit Hacking Campaign

The US Department of Health and Human Services was ensnared by a sweeping hacking campaign that exploited a flaw in file-transfer software called MOVEit, according to an official with the department.

The attackers gained access to data by exploiting MOVEit software used by third-party vendors, the official said, adding that no HHS systems or networks were compromised. Congress was notified of the incident on June 27, according to the official.

The full extent of the breach is unknown. However, one person familiar with the incident called it “large-scale,” while another said at least tens of thousands of records may have …