Social Security Watchdog Probes Claim That DOGE Engineer Stole Massive Databases The inspector general of the Social Security Administration has opened an investigation into a serious security breach allegation involving a member of Elon Musk’s Department of Government Efficiency, or DOGE. A whistleblower has come forward claiming a former DOGE software engineer possessed two of the SSA’s most sensitive databases. According to the complaint, the engineer had copies of the Numident and the Master Death File. These databases contain the personal information of over 500 million living and deceased Americans, including Social Security numbers, dates of birth, and death records. The whistleblower stated the engineer sought assistance in transferring the data from a thumb drive to his personal computer. His stated goal was to sanitize the data before using it at his current employer, an unnamed government contractor. This suggests an intent to utilize the massive datasets for work purposes, raising alarms about improper access and potential misuse. A news outlet reported the complaint was filed with the inspector general in January. When initially contacted at that time, both the SSA and the contractor company said they were unaware of the allegations. Both entities stated they later looked into the claims but found no evidence to confirm them. It remains unclear why the investigation is proceeding now, and neither party provided new comment on the recent report. The SSA’s watchdog office has formally notified Congress and the Government Accountability Office about its active investigation, underscoring the potential gravity of the situation. This is not the first time DOGE’s handling of SSA data has been called into question. Last August, a separate whistleblower complaint alleged that DOGE had stored an SSA database in an unsecured cloud environment. That complaint was filed by Charles Borges, the former chief data officer of the SSA. Commenting on the new allegations, Borges described the scenario as an absolute worst-case breach. He expressed profound concern over the inability to track the data once it has been copied, noting the impossibility of knowing if one or a million copies now exist in the wild. The investigation highlights ongoing cybersecurity vulnerabilities within government data sharing initiatives and raises significant questions about the protocols and oversight for contractors and special projects handling the nation’s most critical personal information. The outcome of the probe will be closely watched for implications on data privacy and federal security standards.
