A massive unsecured database tied to an identity verification provider exposed national IDs, addresses and phone numbers.