20 vulnerabilities and counting.
Check this out:

Of all the shoes waiting to drop on Obamacare over the next year, one of the least-discussed is a damaging data security breach. We’ve seen a few troubling incidents crop up in various states, and an expert uncovered a major backdoor vulnerability to Healthcare.gov early on in the process — but we haven’t heard about any large- scale security meltdowns…yet, that is. Obamacare officials say the site recently passed a battery of security tests, but cyber security professionals offered a starkly different assessment to Reuters:

A group of cyber security professionals is warning that the U.S. government has failed to implement fixes to protect the HealthCare.gov website from hackers, some three months after experts first pointed out the problem. David Kennedy, head of computer security consulting firm TrustedSec LLC, told Reuters that the government has yet to plug more than 20 vulnerabilities that he and other security experts reported to the government shortly after HealthCare.gov went live on October 1. Hackers could steal personal information, modify data or attack the personal computers of the website’s users, he said.