Vermont confirmed that a security breach of the state’s health-care exchange Web site gave at least one user access to another resident’s Social Security number.