A security flaw at public Work and Income kiosks has allowed people to access data