The state's Department of Health and Human Services has confirmed that a vulnerability in a website portal leaked the data of more than 11,700 applicants, including their driver's license and social security numbers.