The operators of Maryland’s health insurance Web site improperly stored Social Security numbers and other customer information while awarding millions of dollars in contracts without ensuring the money would be spent properly, according to a state audit released Friday.

The audit is the latest in a string of reports uncovering loose spending and rushed decision-making involving the once-troubled Maryland Health Benefit Exchange, which the state hurried to create to help enact President Obama’s ambitious federal health-care overhaul.