This needs to receive media attention in, at the least, PA, and otherwhere if possible. If this HMS is hosting government sites, those of us in those states need to notify our representatives about this (and Attorney General's offices).

First off, I'd like to see something conclusive before I go jump on a bandwagon. But in the case that this is true, it's seriously important information that should be brought to HMS' clients' attention.