If there's one piece of identifying data you don't want falling into the wrong hands, it's your Social Security number. That's why recent allegations from a whistleblower are so troubling.
On August 26, Charles Borges, the chief data officer (CDO) at the Social Security Administration (SSA), alleged that DOGE (Department of Government Efficiency) employees copied ultrasensitive data to a cloud server that does not meet government standards for protecting data privacy.
The whistleblower complaint was submitted by the Government Accountability Project.
From just $107.88 $24.99 for Kiplinger Personal Finance
Be a smarter, better informed investor.
Sign up for Kiplinger’s Free Newsletters
Profit and prosper with the best of expert advice on investing, taxes, retirement, personal finance and more - straight to your e-mail.
Profit and prosper with the best of expert advice - straight to your e-mail.
The database that Borges said was copied contains records of every Social Security number the federal government has issued to Americans, along with names, addresses and birthdates.
DOGE copies data to the cloud in a "high-risk" project
The Government Accountability Project assisted Borges in submitting a protected whistleblower disclosure to the Office of the Special Counsel, as well as to congressional committees.
In the whistleblower complaint, Borges alleges that DOGE officials employed by SSA have created a live copy of a critical database, known as the NUMIDENT file, in a cloud environment.
The complaint includes emails from John Solly, a software engineer working at Social Security, who asked a career agency employee about making the copy shortly after the Supreme Court allowed DOGE access.
The NUMIDENT file is a database with over 548 million Social Security numbers, along with the identifying information of everyone living or dead who has ever had a Social Security number.
The complaint also enumerates the following allegations.
- The virtual cloud environment on the internal agency server was accessible only by DOGE employees.
- DOGE was warned that copying the data could make Americans vulnerable to identity theft, but proceeded with the project anyway.
- No verified audit or oversight mechanisms were in place to determine what the data was being used for or whether it was properly secured, and there was no independent security monitoring of the cloud environment.
- DOGE briefly circumvented a March 20 temporary order prohibiting access to certain Social Security data.
- DOGE officials bypassed normal procedures to receive "improper" access to other databases with sensitive information.
The complaint included a copy of an email from Joe Cunningham, the agency's acting chief information security officer, warning that "after a thorough review, we have determined that this request [to copy the information] poses a high risk."
Potential risk from DOGE actions
Borges' complaint shows that, despite privacy concerns, Cunningham requested and received the approval of Michael Russo, a senior DOGE-aligned official at Social Security, to sign off on the project of copying the database to the cloud server, despite making clear that his recommendations to anonymize the personal data had not been followed.
Further emails revealed that the data was transferred despite official security assessments warning that if it were compromised, it would have a "catastrophic impact" on Social Security beneficiaries.
"I have determined the business need is higher than the security risk associated with this implementation and I accept all risks," Aram Moghaddassi, Social Security's chief information officer, and a former employee of Elon Musk at X and Neuralink, wrote in a July 15 memo, as reported by NPR.
Borges disagrees with this assessment. "Should bad actors gain access to this cloud environment, Americans may be susceptible to widespread identity theft, may lose vital health care and food benefits, and the government may be responsible for reissuing every American a new Social Security number at great cost," Borges' complaint said.
No evidence of a data breach
While Borges' allegations are serious, the good news is that it appears no data has been compromised — at least not yet.
Nick Perrine, a spokesman for the SSA, stated that the agency was "not aware of any compromise to this environment," according to the New York Times.
Perrine also defended the actions taken by DOGE, stating, "S.S.A. stores all personal data in secure environments that have robust safeguards in place to protect vital information. The data referenced in the complaint is stored in a longstanding environment used by S.S.A. and walled off from the internet. High-level career S.S.A. officials have administrative access to this system with oversight by S.S.A.'s information security team."
Perrine added that the agency was and remained "dedicated to protecting sensitive personal data."
Congressional investigations may provide more insight into Borges' complaint.
How to protect your data and identity
In the meantime, it's a good idea to follow best practices for protecting against identity theft. Here are some steps to help you quickly protect your data.
- Check your credit report regularly (it's free) and address any errors or unknown accounts you find.
- Consider freezing your credit to prevent the use of your Social Security number and other identifying information.
- Stay informed and read up on the latest identity theft trends of 2025.
Read More
-
These Stocks Dipped in 2025. Do They Have Value?If you are looking to add new long-term positions to your portfolio, as you should, this is the time to examine stocks that the market shuns.
-
Striking Gold (or Gas): A Financial Pro Unpacks the Nuances of Energy InvestingInvesting in the energy industry, particularly oil and gas, involves understanding the facts about how projects generate returns through cash flow and long-term asset building, while also being aware of the risks.
-
A Comfortable Retirement is About More Than MoneyWhen it comes to a happy retirement, money can’t buy these things.
-
I'm 68 and Health Issues Forced Me to Retire. Should I Claim Social Security or Use My Savings Until I'm 70?We asked financial planning experts for advice.
-
Four Ways a Massive Emergency Fund Can Hurt You More Than It HelpsSaving too much could mean you're missing opportunities to put your money to work. Redirect some of that money toward paying off debt, building retirement funds, fulfilling a dream or investing in higher-growth options.
-
Noctourism: The New Travel Trend For Your Next Trip"Noctourism" is a new trend of building travel and vacations around events and plans that take place at night. Take a look at some inspiring noctourism ideas.
-
Decluttering Tips to Get a Head Start on DownsizingStrategies include starting small, adopting a system, getting help from others and being ruthless about what to keep, even when it comes to sentimental items or inherited possessions.
-
I'm a Financial Planner: How to Dodge a Retirement Danger You May Not Have Heard AboutTiming is everything, and sequence of returns risk can mean the difference between a retirement nest egg that's overflowing … or empty.
-
Caring for Aging Parents: An Expert Guide to Easing the Financial and Emotional StrainEarly conversations, financial planning and understanding the progression of care needs can help to mitigate stress and protect family relationships.
-
How Confident Retirees Think Differently About Their FutureConfident retirees approach their future with optimism and resourcefulness, focusing on possibilities rather than limitations. These seven tips show you how you can do the same.
