Vermont’s ObamaCare exchange was compromised by a Romanian hacker late last year, though contract firm CGI Group contends no private information was stolen, reports National Review. However, it took an entire month for officials to realize a breech had occurred, and according to NR, “Michael Gregg, the CEO of the cyber-security consulting firm Superior Solutions, says it’s possible the hacker went on to access other parts of Vermont Health Connect, covering his tracks and remaining undetected to this day.” Most embarrassingly, the hacker hardly had his work cut out for him: “The hacker gained access because the default password to the development server was never changed (in violation of guidelines laid out in the state’s official policy) and because access to the server was not restricted only to users who were known and approved,” NR adds. It seems the millions of dollars wasted on exchanges can’t even buy you a secure password. More…