It started with a single alert on a quiet Tuesday morning. Daniel Berulis, a cybersecurity specialist at the National Labor Relations Board, stared at his screen as a warning flashed: Unusual data movement detected. But this wasn’t just a glitch. Within hours, Berulis would uncover a digital trail that led straight to the heart of a government scandal—one involving Elon Musk’s controversial Department of Government Efficiency (DOGE), a mysterious cloud server, and the personal data of millions of Americans.
The Day the System Went Dark
Berulis wasn’t the only one who noticed something was off. Across federal agencies, IT teams began reporting strange activity: access logs wiped, security controls disabled, and gigabytes of sensitive data vanishing from secure networks. The culprit? A group of technologists from DOGE, a non-official agency created by President Trump and led by Musk, tasked with slashing government waste. But their methods were anything but conventional.
According to Berulis’ sworn testimony, DOGE engineers used tools typically associated with cybercriminals—tools designed to evade detection, disable monitoring, and cover their tracks. At one point, Berulis discovered that controls preventing unauthorized mobile devices from logging into the agency’s cloud tenant had been disabled. Access logs were deleted, making it impossible to track who was accessing the data or where it was going.
The Data Heist
The scale of the breach was staggering. Berulis estimated that at least 10 gigabytes of data had been removed from the NLRB’s network, though the true amount could be much higher. “This opens up the possibility that even more data was exfiltrated,” he said. “Regardless, that kind of spike is extremely unusual because data almost never directly leaves NLRB’s databases.”
But the NLRB wasn’t the only agency affected. Charles Borges, the Social Security Administration’s chief data officer, filed a whistleblower complaint alleging that DOGE members had copied a crucial Social Security database—containing records of all Social Security numbers issued by the federal government—and uploaded it to a vulnerable cloud server. The database included full names, addresses, and birth dates, making it one of the nation’s most sensitive repositories of personal information.
Borges didn’t say the database had been breached, but his complaint warned of “enormous vulnerabilities.” “Should bad actors gain access to this cloud environment, Americans may be susceptible to widespread identity theft, may lose vital health care and food benefits, and the government may be responsible for reissuing every American a new Social Security number at great cost,” he wrote.
The Cover-Up
The situation was made worse by the lack of oversight. Berulis and Borges both reported their concerns to federal authorities, only to be told to drop their investigations. “Instructions had come down to drop the reporting to US-CERT and not file a report,” Berulis said. Meanwhile, agency bosses were ordered to hand over any requested accounts and assist DOGE without resistance.
The NLRB and SSA have denied the allegations, claiming their data remains secure. But the damage was done. The story quickly spread, sparking outrage among government employees and the public alike. Representative Gerald Connolly called DOGE’s actions “technological malfeasance and illegal activity,” and demanded investigations from both the Department of Labor and the NLRB.
A Nation on Edge
For ordinary Americans, the implications were terrifying. Imagine a family in Ohio, going about their daily lives, unaware that their Social Security numbers, addresses, and birth dates could be exposed to hackers. Or a retiree in Florida, relying on Social Security benefits, suddenly facing the prospect of identity theft and financial ruin.
The breach wasn’t just a technical failure—it was a human one. It exposed the vulnerabilities of a government system that had placed trust in a group with questionable motives and methods. As one analyst put it, “This isn’t just about data. It’s about the erosion of public trust in our institutions.”
What’s Next
The fallout from the DOGE scandal is still unfolding. Investigations are underway, lawsuits are being filed, and the public is demanding answers. But the bigger question remains: Could it happen again?
As governments increasingly rely on private contractors and cost-cutting measures, the risk of similar breaches grows. The DOGE files serve as a stark reminder that when it comes to data security, cutting corners can have catastrophic consequences.
Provocative Question:
If a group like DOGE can access and exfiltrate sensitive government data, what’s stopping the next “efficiency expert” from doing the same?
FAQ
Q: What is DOGE in the context of government data breaches?
A: DOGE, or the Department of Government Efficiency, is a non-official agency created by President Trump and led by Elon Musk, tasked with cutting government waste. Whistleblowers allege that DOGE’s actions led to significant data breaches at federal agencies.
Q: How did DOGE allegedly cause a data breach?
A: DOGE engineers reportedly used cybercriminal tools to disable security controls, delete access logs, and exfiltrate sensitive data from government networks.
Q: What kind of data was exposed?
A: The exposed data includes Social Security numbers, names, addresses, and birth dates—some of the most sensitive personal information held by the government.
Q: What are the potential consequences of the breach?
A: The breach could lead to widespread identity theft, loss of benefits, and the need for the government to reissue Social Security numbers.
Q: What is being done to prevent future breaches?
A: Investigations are ongoing, and lawmakers are calling for stricter oversight of private contractors with access to government data.