Why it matters: Driver's license data is harder to reset than a password, so a leak like this creates long-tail fraud risk for victims for years. It also raises fresh questions about how much personal data rental and travel companies retain and whether their vendor security practices are keeping pace with the value of that data on dark web markets.