The exchange, named Vermont Health Connect, offers a health care insurance market under the federal Affordable Care Act.
According to a report filed with the federal Centers for Medicare and Medicaid Services (CMS) by state officials, on October 17 a consumer who had signed up on the web site received a copy of his application in the mail. On the back of the application was a handwritten note: "VERMONT HEALTH CONNECT IS NOT A SECURE WEBSITE!"
The Associated Press obtained the report, which did not name the consumer, after a request under the state public records law to the Department of Vermont Health Access.
There is no indication in any information released so far how the breach was accomplished.