Back in May :

Hackers stole passwords of Worldcoin Orb operators

Past reporting found that information collected by operators includes email addresses, phone numbers and scans of national ID cards in some regions.