It sure looks like hackers breached a major ID card verification service