The ID-verification vendor used by venues and dispensaries says hackers accessed its cloud data, and the FBI is investigating.