A whistleblower alleges that the Department of Government Efficiency (DOGE) uploaded hundreds of millions of Social Security records to a vulnerable cloud server, putting Americans' personal information at risk. The database contains sensitive data, including Social Security numbers, birthplaces, and financial information. The whistleblower, Charles Borges, raised concerns about the lack of security controls, but his warnings were ignored. The Supreme Court lifted a restraining order in June, allowing DOGE to access the database, and top agency officials signed off on the decision. The move allegedly violated internal security controls and federal privacy laws.
A whistleblower has alleged that the Department of Government Efficiency (DOGE), a Trump administration initiative, uploaded hundreds of millions of Social Security records to a vulnerable cloud server. The move, according to Charles Borges, the chief data officer at the Social Security Administration (SSA), poses a significant risk to the personal information of Americans.
The whistleblower complaint, filed on Tuesday, alleges that DOGE staffers created a live copy of the entire country's Social Security data from its Numerical Identification System database. This information includes highly sensitive details such as names, birthplaces, Social Security numbers, and financial information. The data was uploaded to a server without independent oversight, accessible only by DOGE officials [1].
The complaint states that these actions constitute violations of laws, rules, and regulations, abuse of authority, gross mismanagement, and a substantial threat to public health and safety. The database contains highly personal information about hundreds of millions of US citizens and residents [1].
The SSA has denied that the sensitive data has been compromised and maintains that it stores all personal data in secure environments with robust safeguards. An SSA spokesperson stated, "The data referenced in the complaint is stored in a longstanding environment used by SSA and walled off from the internet" [1].
The Government Accountability Project, a non-profit whistleblower organization, is providing legal counsel to Borges and has called for immediate oversight and an independent audit. Andrea Meza, the director of advocacy and strategy at the Government Accountability Project, said, "Placing a live copy of Americans’ Social Security data in a cloud environment without independent oversight puts everyone with a social security number and their families at real risk of identity theft, interrupted benefits, and tax or medical fraud that can follow them for years" [1].
The whistleblower complaint comes amidst ongoing concerns about DOGE's handling of government data. In April, a separate whistleblower disclosure raised concerns that DOGE employees had potentially exposed sensitive National Labor Relations Board information. The complaint also alleges that DOGE employees attempted to cover up documentation of what data they accessed [2].
DOGE's actions have been criticized by lawmakers, ethics watchdog groups, and former and current federal employees for their apparent disregard for security protocols and transparency. The agency has gained access to troves of information from a wide swath of government databases, but there has not been a full accounting of why DOGE has accessed the public's data [2].
The Supreme Court lifted a federal restraining order in March, initially blocking DOGE staffers from accessing the country's database of Social Security records. However, the order was lifted in June, allowing DOGE to proceed with its access [2].
The whistleblower's allegations highlight the potential risks associated with the use of cloud technology in government data storage. While data breaches involving federal government data stored in the cloud are rare, they are not unheard of. In 2023, TechCrunch reported that the U.S. Department of Defense publicly exposed thousands of sensitive military emails online due to a security lapse [3].
The SSA spokesperson emphasized that the agency remains dedicated to protecting sensitive personal data. However, the whistleblower's complaint and the subsequent allegations raise serious concerns about the security of Americans' personal information.
References:
[1] https://www.theguardian.com/us-news/2025/aug/26/doge-social-security-elon-musk
[2] https://techcrunch.com/2025/08/26/doge-uploaded-live-copy-of-social-security-database-to-vulnerable-cloud-server-says-whistleblower/
[3] https://www.nytimes.com/2025/08/26/us/politics/doge-social-security-data.html
Comments
No comments yet