Doge’s actions to upload social security databases to vulnerable cloud servers have effectively created a “live copy of national social security information,” the whistleblower says.
More retirees rely on social security: AARP
When Social Security turns 90, 65% of retirees are currently dependent. The survey reveals that public confidence in its future continues to decline.
Straight Arrow News
WASHINGTON – Personal information from more than 300 million Americans is at risk of leaks and hacking after government efficiency employees upload sensitive social security databases to vulnerable cloud servers, the Social Security Agency’s chief data officer said in the whistleblower complaint.
Doge’s actions were attorneys for Chief Data Director Charles Borges, who alleged in the August 26 complaint, effectively created a “live copy of national social security information.”
The data that Borges said was copied to a server that is only accessible to Doge employees – it includes all the information required for the Social Security Card, including Social Security Number, applicant’s name, birthplace and date, parents’ name, race and ethnicity, citizenship and other personal information.
“If a bad actor accesses this cloud environment, Americans are susceptible to widespread identity theft, and could lose important medical and food benefits, and the government may be responsible for reissuing new social security numbers for all Americans at a significant cost.”
The Trump administration’s doge, led by billionaire tech entrepreneur Elon Musk, swept the federal government in the early weeks of Trump’s second term, ramming through departments and agencies, including the Social Security Agency, cutting programs and identifying employees.
Doge began taking steps to move Social Security data into a cloud environment, according to Borges, shortly after the Supreme Court ruled on June 6 that Doge employees had full access to the data of millions of Americans held by the Social Security Agency. The High Court has suspended previous orders from federal judges, allowing Doge to quickly gain widespread access to the data.
The complaints first reported by The New York Times cite possible violations of Social Security Protocols and federal privacy laws. The complaint was addressed to the US Bureau of Special Advisors and Committee Leaders of the US House.
When asked to comment, the White House referred USA Today to the Social Security Agency.
A department spokesman said in a statement that the Social Security Agency and its commissioner Frank Vignano “we take all whistleblower complaints seriously,” but rejected the concerns raised by Borges.
“The data referenced in the complaint is stored in the long-standing environment used by SSA and surrounded by the Internet,” the statement said. “High-level carrier SSA officials have administrative access to this system through surveillance by the SSA’s information security team. They are unaware of compromises in this environment and are dedicated to protecting sensitive personal data.”
Doge officials ignored security concerns and protocols, complaint said
Borges’ complaints said on June 10 that former Doge employee John Solly requested that Social Security data be transferred to the new cloud. Only Doge employees, not IT workers, can access the server.
Given the sensitivity of the data, cybersecurity officers within the department raised concerns about the arrangement. “Unauthorized access to (data) is considered a catastrophic effect on SSA beneficiaries and SSA programs,” one warning read.
Alam Mogadashi, the chief information officer of the Social Security Administration and longtime Musk ally, granted “tentative approval” on June 15th to upload data to the cloud. He “deemed to have a higher business needs than the security risks associated with this implementation and we decided to accept all risks associated with this implementation and operations,” the complaint states.
According to Borges, he was signed off by another Doge employee Michael Russo on June 26 by another Doge employee Michael Russo, bypassing agency rules and protocols.
The complaint calls Mogadashi “abuse of authority” and “abuse of authority” that constitute “large mismanagement, substantial and specific threats to public health and safety, and potential violations of the law.”
“Moghaddassi has circumvented independent security surveillance and has a “consider” risk-considering copies of American citizens’ social security data in a potentially unsecured cloud environment,” the complaint states. “In reality, it’s the Americans who assume the risk.”
Since Musk left the White House in May, Doge’s efforts to cut government spending have taken on a low profile, but Doge employees work across the federal government, including the Social Security Agency.
Doge is set to finish his job in the Trump administration in the summer of 2026 under an executive order signed by the president in January.
Reach Joey Garrison with X @joeygarrison.