Nevada residents applying to sell medical marijuana got just got an unpleasant surprise. The state's Department of Health and Human Services has confirmed that a vulnerability in a website portal leaked the data of more than 11,700 applicants, including their driver's license and social security numbers. Officials have taken down the relevant site until they fix the flaw, but there's a concern that fraudsters might have seen the info and used it for malicious purposes.