Yes it is and in goes much deeper than has been reported. Before you can get access to a government computer you must have a completed back ground check and have completed mandatory computer awareness training before you can get an e-mail account.
It appears the director of HHS and others in creating these false accounts also falsified training and other government records to create the accounts. In doing so they violated a host a laws and violated countless regulations regarding computer and records security and accountability provisions.
This is go to jail stuff.
I wonder if any zipped up top secret documents have been sent to our enemies from any of those accounts.