I believe they do.
At least, that's what their email told me.
I'm a DOD employee (no sense denying that, and exposing it online for all to see, since they've already got my stuff)
By 'stuff' I mean everywhere I've ever lived, all my relatives and their birth dates, places of birth, all my references for security clearances with addresses, maiden names, passport numbers, bank accounts, work history, in some cases birth certificate numbers.
If it applies, all divorce records, court things, traffic tickets, adoption records, inheritances, associations, and I don't know what all.
They're all in what the ChiComs were rooting around in for over a year.
Every one of my closest friends and relatives are now vulnerable to every bit of scams, phishing, cold calls, blackmail, you name it.
By being associated with the USG, everyone I know is now vulnerable.
And they're vulnerable for longer than the 18 month "free" identity theft service provided by the lowest bidder government contract service.
Same for me, KitJ. I’m trying to figure out how to notify my whole family and all my friends— everybody I’ve ever cited on a half-century of SF-86 forms that their personal data are now at risk.
TC
For those interested in the types of questions the SF 86 is available online in PDF format.
http://www.gsa.gov/portal/forms/download/116390