HealthCare.gov is still not fully secure two months out from its second launch date, federal investigators said in a report Tuesday. The nonpartisan Government Accountability Office (GAO) said that while health officials have strengthened parts of the website's security, they failed to implement best practices across the entire system, leaving small weaknesses that place sensitive information "at risk." The report is likely to dominate a House Oversight Committee hearing scheduled for Thursday, where Republicans have urged CMS Administrator Marilyn Tavenner to testify. Lawmakers are concerned about news that a hacker breached part of HealthCare.gov this summer, though no consumer information was apparently viewed or taken.