Hah, I had a background check company for a previous employer send me an email saying:

"Hi Firebeyond, we're doing a background check. Can you confirm the following info you entered into our portal?" then proceeds to list full SSN, drivers license, DOB, etc., etc., etc.

"... and can you also confirm that this is the correct email address we have on file?"

All the while they had reached out by FB Messenger to my partner (not that she was in any of the info I submitted, and this was just a standard BG check, not a security clearance) to ask her if she knew me...

Luckily, my new employer was as horrified as I was, apologized profusely, and fired the background check company.