An incident report by cybersecurity firm Mandiant confirmed the March data breach of D.C. Health Link was enabled by a misconfigured server.

The head of D.C. Health Link will brief Congress on the data breach last month that affected hundreds of people on Capitol Hill.