Years ago, the Florida list was public and a number of data brokers and journalists obtained it. I know because I did a "Choicepoint" employment background check ON MYSELF, a number of years ago, and the data showed that I may have a Florida CWP. I don't anymore, but that list is out there now, along with the 16000 new ones that were hacked. For my privacy I use as many mechanisms as possible to see what's out there about me. I've found the Feds doing a credit check on me for my security clearance, my driving records (including civil issues) with a data broker, my voter registration, and Drivers License number. I don't have any criminal history and I run frequent checks to make sure that remains so, lest I get confused with another ScottDLS.
OPM has told me a bad actor (presumably the Chi-comms) have my most recent security background investigation and fingerprints. My health insurance records have quite a bit of info about me, though I take some steps to prevent them from having everything.
I assume anything I put in any e-mail or documents on my work computers are available to anyone with relatively little effort, certainly the government with a subpoena. My home computers less so. I keep them encrypted with commercially available software that I believe is secure, except perhaps from the FBI or NSA (though with significant effort).