They didn't mention if the attackers got photos too. If not this time, next time.

I believe the "identification by digital photograph" that is being rolled out at US airports (no longer need to show ID at some security checkpoints) is based on photographs shared by state-level driver's license/id card.

Increased roll-out of facial recognition technology probably increases the value of stealing headshots associated with other identity information.

I believe federal "RealID" requires states to maintain a database of digital photographs from identification documents. I think almost all states do that now.