The U.S. Securities and Exchange Commission said Monday that the hackers who broke into its corporate filing system last year accessed two people’s personal information, a change from the agency’s previous assessment that it didn’t believe such data had been compromised.