Nearly a year after making the discovery, a federal agency has reported that the database used to hold personal information from Obamacare enrollees had more than 100 security vulnerabilities at least until February of this year, which left the information vulnerable to hacking.

The analysis, conducted between August and December of 2014, was released on Monday by the Office of Inspector General for the Department of Health and Human Services. The report found there were security deficiencies in the Multidimensional Insurance Data Analytics System that included 22 high, 62 medium, and 51 low-risk vulnerabilities, for a total of 135.