If there's one piece of identifying data you don't want falling into the wrong hands, it's your Social Security number. That's why recent allegations from a whistleblower are so troubling.
On August 26, Charles Borges, the chief data officer (CDO) at the Social Security Administration (SSA), alleged that DOGE (Department of Government Efficiency) employees copied ultrasensitive data to a cloud server that does not meet government standards for protecting data privacy.
The whistleblower complaint was submitted by the Government Accountability Project.
From just $107.88 $24.99 for Kiplinger Personal Finance
Be a smarter, better informed investor.
Sign up for Kiplinger’s Free Newsletters
Profit and prosper with the best of expert advice on investing, taxes, retirement, personal finance and more - straight to your e-mail.
Profit and prosper with the best of expert advice - straight to your e-mail.
The database that Borges said was copied contains records of every Social Security number the federal government has issued to Americans, along with names, addresses and birthdates.
DOGE copies data to the cloud in a "high-risk" project
The Government Accountability Project assisted Borges in submitting a protected whistleblower disclosure to the Office of the Special Counsel, as well as to congressional committees.
In the whistleblower complaint, Borges alleges that DOGE officials employed by SSA have created a live copy of a critical database, known as the NUMIDENT file, in a cloud environment.
The complaint includes emails from John Solly, a software engineer working at Social Security, who asked a career agency employee about making the copy shortly after the Supreme Court allowed DOGE access.
The NUMIDENT file is a database with over 548 million Social Security numbers, along with the identifying information of everyone living or dead who has ever had a Social Security number.
The complaint also enumerates the following allegations.
- The virtual cloud environment on the internal agency server was accessible only by DOGE employees.
- DOGE was warned that copying the data could make Americans vulnerable to identity theft, but proceeded with the project anyway.
- No verified audit or oversight mechanisms were in place to determine what the data was being used for or whether it was properly secured, and there was no independent security monitoring of the cloud environment.
- DOGE briefly circumvented a March 20 temporary order prohibiting access to certain Social Security data.
- DOGE officials bypassed normal procedures to receive "improper" access to other databases with sensitive information.
The complaint included a copy of an email from Joe Cunningham, the agency's acting chief information security officer, warning that "after a thorough review, we have determined that this request [to copy the information] poses a high risk."
Potential risk from DOGE actions
Borges' complaint shows that, despite privacy concerns, Cunningham requested and received the approval of Michael Russo, a senior DOGE-aligned official at Social Security, to sign off on the project of copying the database to the cloud server, despite making clear that his recommendations to anonymize the personal data had not been followed.
Further emails revealed that the data was transferred despite official security assessments warning that if it were compromised, it would have a "catastrophic impact" on Social Security beneficiaries.
"I have determined the business need is higher than the security risk associated with this implementation and I accept all risks," Aram Moghaddassi, Social Security's chief information officer, and a former employee of Elon Musk at X and Neuralink, wrote in a July 15 memo, as reported by NPR.
Borges disagrees with this assessment. "Should bad actors gain access to this cloud environment, Americans may be susceptible to widespread identity theft, may lose vital health care and food benefits, and the government may be responsible for reissuing every American a new Social Security number at great cost," Borges' complaint said.
No evidence of a data breach
While Borges' allegations are serious, the good news is that it appears no data has been compromised — at least not yet.
Nick Perrine, a spokesman for the SSA, stated that the agency was "not aware of any compromise to this environment," according to the New York Times.
Perrine also defended the actions taken by DOGE, stating, "S.S.A. stores all personal data in secure environments that have robust safeguards in place to protect vital information. The data referenced in the complaint is stored in a longstanding environment used by S.S.A. and walled off from the internet. High-level career S.S.A. officials have administrative access to this system with oversight by S.S.A.'s information security team."
Perrine added that the agency was and remained "dedicated to protecting sensitive personal data."
Congressional investigations may provide more insight into Borges' complaint.
How to protect your data and identity
In the meantime, it's a good idea to follow best practices for protecting against identity theft. Here are some steps to help you quickly protect your data.
- Check your credit report regularly (it's free) and address any errors or unknown accounts you find.
- Consider freezing your credit to prevent the use of your Social Security number and other identifying information.
- Stay informed and read up on the latest identity theft trends of 2025.
Read More
-
US-China Trade Hopes Send Stocks to New Highs: Stock Market TodayApple and Microsoft are on track to join Nvidia in the $4 trillion market cap club.
-
A Lesson From the School of Rock About the MarketsIt's hard to hold your nerve during a downturn, but next time the markets take a tumble, remember this quick rock 'n' roll tutorial and aim to stay invested.
-
I Retired at 65 With $7.8 Million and Feel Like I Over-Saved. My 40-Something Son Is on the Same Path. Should I Tell Him to Reconsider?We ask financial experts for advice.
-
Deciding on Senior Living? 10 Things You Should KnowSenior living options are no longer God's waiting room.
-
I'm a Financial Pro: This Is How You Can Guide Your Heirs Through the Great Wealth TransferFocus on creating a clear estate plan, communicating your wishes early to avoid family conflict, leaving an ethical will with your values and wisdom and preparing them practically and emotionally.
-
Try This One-Minute Test to Uncover Hidden Health RisksFinding out this little-known fact about your body could reveal your risk of heart disease and more. It's a simple, free check for healthy aging.
-
Child-Free Cruises Perfect For Your Retirement CelebrationHow to find a bespoke ocean or river vacation for adults. Many of these options are smaller, charming river cruises, expeditions, or niche experiences.
-
Social Security Wisdom From a Financial Adviser Receiving Benefits HimselfYou don't know what you don't know, and with Social Security, that can be a costly problem for retirees — one that can last a lifetime.
-
Take It From a Tax Expert: The True Measure of Your Retirement Readiness Isn't the Size of Your Nest EggA sizable nest egg is a good start, but your plan should include two to five years of basic expenses in conservative, liquid accounts as a buffer against market volatility, inflation and taxes.
-
2026 Social Security COLA is 2.8%: What You Need to KnowThe SSA has announced the 2026 Cost-of-Living Adjustment (COLA), the new maximum taxable wage cap, and the earnings requirements for Social Security credits.
