Absolutely right, there are certain risks because of this. For example, there are quite a few semi-documentary programs of journalists on youtube about leaks of personal data and how ordinary citizens suffer from this. For many years, for example, there was a very urgent problem when a person was issued a loan from a bank or a microfinance organization, and a person might not know this.

The most interesting thing is that in order to combat this problem, they did not deal with data leaks. It's just that over time, most of the organizations that issue loans stopped doing this without any explicit consent from the client himself.
And from March 1, 2025, according to the law, anyone will be able to come to any bank and write a statement stating that it is prohibited to apply for a loan. Well, so that no one else gets a loan without his consent somehow