Two months out from its second launch date, Healthcare.gov is still not fully secure and is vulnerable to putting consumers at risk, government officials said Tuesday.

The Government Accountability Office said in a new report that privacy and security weaknesses still exist on the federal exchange website despite some strides made by the Centers for Medicare & Medicaid Services within the last year. The report comes nearly a year after the website’s troubled rollout, and following a recent report that Healthcare.gov was hacked back in July, in which an unknown hacker infiltrated the site.

“While CMS has taken steps to protect the security and privacy of data processed and maintained by the complex set of systems and interconnections that support Healthcare.gov, weaknesses remain both in the processes used for managing information security and privacy as well as the technical implementation of IT security controls,” the GAO report said.