From the article:
“it appears to be siphoning images collected by a widely-used identity verification company based in Louisiana.”
Worth noting that 5 US states (e.g. Florida) have stopped issuing standard drivers licenses and effectively force their residents to obtain a “Real ID” which includes additional data – which of course makes more sensitive data available to cybercriminals.
(edit) BTW, would be useful to have a free-world venue for posts just about data breaches. Proposal here.
Yeah, this is why I refuse to buy from dispensaries that scan my ID card in any way.
If you want to see it with your eyes, that’s fine. I have no problem authenticating with a human. But as soon as you want to put it in front of a camera lens, that’s me walking out the door.