I find it especially ironic that they would leak all my data, given the fact that they would ask of me to forward them every piece of id imaginable whenever I needed to forge or amend a new one (when adding a mention on my driver's license for instance).
Like they didn't have access to it anyway.
They do have to prove who you are, and to do that you need to show your ID(s) and they need to check it in their system. I don't understand your comment.