OPM's e-QIP site was vulnerable to heartbleed for at least a week after public disclosure (2014). They still claim that they were never exploited. The arrest r

OPM's e-QIP site was vulnerable to heartbleed for at least a week after public disclosure (2014). They still claim that they were never exploited. The arrest records, addresses, and other sensitive info I was able to view say otherwise. I expected the EINSTEIN program would have helped to quickly defend against heartbleed after disclosure, but apparently not. US Gov just sucks at cybersecurity defense.