The recent hack of a U.S. Customs and Border Protection subcontractor’s database confirmed fears that biometric data—such as photo IDs and fingerprints—are vulnerable to hacking.