The unauthorized party also gained access to a small number of government‑ID images (e.g., driver’s license, passport) from users who had appealed an age determination.
How am I not surprised.
Update on a Security Incident Involving Third-Party Customer Service