We're learning more this morning about a security breach with Vermont Health Connect and when officials were notified.
Commissioner Mark Larson says he notified federal officials and the state attorney general's office around mid-October.
Despite doing that, when asked during a hearing about any security breaches, he told lawmakers that they hadn't had any.
While he did apologize for that, Larson and Governor Peter Shumlin have questioned whether the security lapse was significant enough to mention to lawmakers.
They say, the one lapse occurred when a consumer reported that someone had mailed him a copy of his own insurance application that included his Social Security number.