Archive — US — techcrunch
DOGE uploaded live copy of Social Security database to ‘vulnerable’ cloudserver, says whistleblower
A whistleblower claims that the Trump administration's DOGE uploaded sensitive Social Security records to an unsecured cloud server, risking Americans' personal data. Charles Borges, SSA's chief data officer, raised concerns about the decision made by top officials, warning that a breach could lead to catastrophic consequences. Critics pointed to a lack of cybersecurity oversight in the project, emphasizing the potential for widespread data exposure.
Key points
- Charles Borges, a whistleblower, claims the DOGE copied 450 million Social Security records to a vulnerable cloud server, bypassing oversight.
- Concerns were raised regarding the security of the uploaded data, including names, birthplaces, citizenship, and Social Security numbers.
- The decision to upload the database was signed off by high-ranking officials despite internal warnings.
- The move could allow unauthorized public access, risking exposure of sensitive personal information of millions.
- A Supreme Court decision allowed DOGE access to the database, after which internal approvals were sought from agency leadership.
- Critics highlight the lack of cybersecurity practices and historical negligence in data handling by the administration.
Why it matters
- The incident highlights ongoing concerns about the security of federal data management under president Trump’s administration.
- It draws parallels to other cyber incidents, such as the DoD's email data exposure in 2023, showcasing the risks of cloud storage mismanagement.
- In the broader context, the 2025 IT landscape emphasizes the need for robust cybersecurity, especially concerning sensitive government information.
This situation underscores severe lapses in data security governance and poses a potential threat to millions, raising urgent calls for improved oversight and accountability in managing sensitive government information.