After exposure, security holes sealed in MN's health exchange

A security flaw has been fixed on MNsure, Minnesota's health insurance marketplace — one that had left users vulnerable to data interception by hackers. The fix follows an MPR story last week and a meeting Monday between forensic analyst Mark Lanterman and the state's chief information security officer, Chris Buse. At the meeting, Lanterman explained how he discovered the flaw and how the state could resolve the problem. Lanterman tested for the flaw again Tuesday. "I'm happy to report that MNsure is no longer vulnerable to this attack," he said.