Cannabis giant Verano exposed the private data of at least half a million of its medical marijuana customers, according to a proposed class action removed to federal court that alleges the company turned ordinary receipts into “highly sensitive medical records.”