The Department of Homeland Security pushed out the revamped tool while it was still adding data. That led to widespread misidentification, particularly for citizens born outside the U.S.