Mine was leaked several times. At least once by the government itself. See https://iapp.org/news/a/21-5-million-breached-in-second-opm-... for example.