DOGE Compromised Social Security Data, Says Whistleblower
A whistleblower accused the DOGE officials of copying over 300 million Social Security numbers.
If there's one piece of identifying data you don't want falling into the wrong hands, it's your Social Security number. That's why recent allegations from a whistleblower are so troubling.
On August 26, Charles Borges, the chief data officer (CDO) at the Social Security Administration (SSA), alleged that DOGE (Department of Government Efficiency) employees copied ultrasensitive data to a cloud server that does not meet government standards for protecting data privacy.
The whistleblower complaint was submitted by the Government Accountability Project.
From just $107.88 $24.99 for Kiplinger Personal Finance
Become a smarter, better informed investor. Subscribe from just $107.88 $24.99, plus get up to 4 Special Issues
Sign up for Kiplinger’s Free Newsletters
Profit and prosper with the best of expert advice on investing, taxes, retirement, personal finance and more - straight to your e-mail.
Profit and prosper with the best of expert advice - straight to your e-mail.
The database that Borges said was copied contains records of every Social Security number the federal government has issued to Americans, along with names, addresses and birthdates.
DOGE copies data to the cloud in a "high-risk" project
The Government Accountability Project assisted Borges in submitting a protected whistleblower disclosure to the Office of the Special Counsel, as well as to congressional committees.
In the whistleblower complaint, Borges alleges that DOGE officials employed by SSA have created a live copy of a critical database, known as the NUMIDENT file, in a cloud environment.
The complaint includes emails from John Solly, a software engineer working at Social Security, who asked a career agency employee about making the copy shortly after the Supreme Court allowed DOGE access.
The NUMIDENT file is a database with over 548 million Social Security numbers, along with the identifying information of everyone living or dead who has ever had a Social Security number.
The complaint also enumerates the following allegations.
- The virtual cloud environment on the internal agency server was accessible only by DOGE employees.
- DOGE was warned that copying the data could make Americans vulnerable to identity theft, but proceeded with the project anyway.
- No verified audit or oversight mechanisms were in place to determine what the data was being used for or whether it was properly secured, and there was no independent security monitoring of the cloud environment.
- DOGE briefly circumvented a March 20 temporary order prohibiting access to certain Social Security data.
- DOGE officials bypassed normal procedures to receive "improper" access to other databases with sensitive information.
The complaint included a copy of an email from Joe Cunningham, the agency's acting chief information security officer, warning that "after a thorough review, we have determined that this request [to copy the information] poses a high risk."
Potential risk from DOGE actions
Borges' complaint shows that, despite privacy concerns, Cunningham requested and received the approval of Michael Russo, a senior DOGE-aligned official at Social Security, to sign off on the project of copying the database to the cloud server, despite making clear that his recommendations to anonymize the personal data had not been followed.
Further emails revealed that the data was transferred despite official security assessments warning that if it were compromised, it would have a "catastrophic impact" on Social Security beneficiaries.
"I have determined the business need is higher than the security risk associated with this implementation and I accept all risks," Aram Moghaddassi, Social Security's chief information officer, and a former employee of Elon Musk at X and Neuralink, wrote in a July 15 memo, as reported by NPR.
Borges disagrees with this assessment. "Should bad actors gain access to this cloud environment, Americans may be susceptible to widespread identity theft, may lose vital health care and food benefits, and the government may be responsible for reissuing every American a new Social Security number at great cost," Borges' complaint said.
No evidence of a data breach
While Borges' allegations are serious, the good news is that it appears no data has been compromised — at least not yet.
Nick Perrine, a spokesman for the SSA, stated that the agency was "not aware of any compromise to this environment," according to the New York Times.
Perrine also defended the actions taken by DOGE, stating, "S.S.A. stores all personal data in secure environments that have robust safeguards in place to protect vital information. The data referenced in the complaint is stored in a longstanding environment used by S.S.A. and walled off from the internet. High-level career S.S.A. officials have administrative access to this system with oversight by S.S.A.'s information security team."
Perrine added that the agency was and remained "dedicated to protecting sensitive personal data."
Congressional investigations may provide more insight into Borges' complaint.
How to protect your data and identity
In the meantime, it's a good idea to follow best practices for protecting against identity theft. Here are some steps to help you quickly protect your data.
- Check your credit report regularly (it's free) and address any errors or unknown accounts you find.
- Consider freezing your credit to prevent the use of your Social Security number and other identifying information.
- Stay informed and read up on the latest identity theft trends of 2025.
Read More
-
Trump Reshapes Foreign PolicyThe Kiplinger Letter The President starts the new year by putting allies and adversaries on notice.
-
How to Plan a (Successful) Family ReunionFrom shaping the guest list to building the budget, here's how to design a successful and memorable family reunion.
-
These Unloved Energy Stocks Are a BargainCleaned-up balance sheets and generous dividends make these dirt-cheap energy shares worth a look.
-
You've Heard It Before, But This Investment Advice Still Pays Off"Time in the market beats timing the market" ¬— been there, done that, right? But don't write off the underlying advice. There's a reason it's a popular saying.
-
6 Champagne Problems Successful Retirees FaceWhat do you do if your biggest financial threat is simply having too much of a good thing — money?
-
A Portfolio Checklist If You're Planning to Retire in 2027Are you planning to retire in 2027? This portfolio checklist will help put you on the right path.
-
How to Avoid Being Buried by the Tax Avalanche in Retirement: Tips From a Wealth AdviserAll that cash you have in tax-deferred accounts could launch you into a higher tax bracket when you start withdrawals. It's time to protect your income.
-
I'm a Financial Adviser: This Is the Real Secret to Retirement SuccessFor real retirement security, forget about chasing returns and focus instead on the things you can control: income, taxes, risk-taking and decision-making.
-
Is Your Retirement Plan Based on Social Security Fact or Fiction?One in two Americans don't know much about Social Security — and some are basing their retirement on mistaken beliefs. It's time to separate fact from fiction.
-
Are You Investing to Score Points or Make Money? Cautionary Tales From an Investment AdviserHave you become numb to risk? Is your brokerage app or website fueling your desire to trade? An investment adviser explains why it always pays to be cautious.
-
Your Parents' Retirement Plan Won’t Work for You (The Stats Are In)Five stats show how you need to rethink retirement, because "the future ain’t what it used to be."
