Travelers’ photos stolen after CBP subcontractor breached