I think the whole point of it is that they (at least my state) has to get a copy of your DL's number and you have to sign the form agreeing that it is you.
The way I see it is someone has either hacked the system to get information or someone on the inside is getting the information and there they go.
Walgreens around this neck of the woods have always been mismanaged and have had a history of no regard to the persons personal information. Thats why I will never step foot into one even if it was the last drugstore left standing.
I would rather eat tree bark than to go any of their stores.
Billy