Sure. This is true for every official, regardless of party.
And you, if you're an American reading this.
The US hasn't enacted serious privacy protections for citizens.
This is a consequence.
Companies intrusively soak up your personal data, get breached, and nobody blinks.
Breaches are one of the first places attackers go when they want to target.
This is why password re-use is dangerous. And two factor authentication is key.
If your favorite 'strong password' is in a breach, an attacker is going to try it against every other account you have.
Story: https://www.spiegel.de/international/world/hegseth-waltz-gabbard-private-data-and-passwords-of-senior-u-s-security-officials-found-online-a-14221f90-e5c2-48e5-bc63-10b705521fb7