Hackers accessed the personal information of over 56,000 health insurance customers, affecting US House of Representatives members and staffers when they recently hit DC Health Link, executive director Mila Kofman told a House joint hearing Wednesday.

The March data breach of the District of Columbia’s online insurance marketplace exposed the Social Security numbers and other personal data of 17 representatives and 585 House employees, Kofman testified.

A misconfigured cloud server was responsible for the security breach, exposing its IP address and providing hackers with access to two insurance enrollment reports without requiring authentication, Kofman told members of the House Oversight …