OPM data breach
The US government disclosed in 2015 that attackers had compromised Office of Personnel Management systems. The incidents affected personnel records for about 4.2 million people and background-investigation records for about 21.5 million people, including 5.6 million sets of fingerprints.
Background-investigation files can contain financial, mental-health, relationship, travel, and foreign-contact information about applicants and associates. The resulting harm model extends beyond identity theft to coercion, counterintelligence, and risk imposed on people who never chose to be primary record subjects.
The OPM case supports the Case for privacy and security principle that a single comprehensive dossier can become unusually powerful after compromise.