In pre-4.7 versions of Episerver Forms it is possible to have form submissions accessible to all front end users. End users may find confidential form data in search results so steps should be take to avoid this.

Update your Episerver.Forms Nuget package to at least 4.7.0.