Social Security Data Officer Resigns After Alleging Massive Data Breach

The Social Security chief data officer, Charles Borges, who raised concerns about a data security breach involving the Department of Government Efficiency (DOGE), has resigned from the agency. Borges alleged that DOGE had uploaded the personal data of 300 million people to the digital cloud, creating a significant security risk.

Borges' whistleblower report detailed how DOGE's actions put sensitive personal information, such as addresses and birth dates, at risk of being compromised. He stated in a letter to Social Security Commissioner Frank Bisignano that he was leaving his position involuntarily. Borges cited a negative work environment under new leadership, characterized by a lack of communication and organizational issues.

The whistleblower complaint further alleged systemic data security violations and potential breaches of security protocols and federal privacy laws by DOGE personnel. Borges warned that if unauthorized individuals gained access to the cloud environment, Americans could face widespread identity theft and loss of essential benefits. He also noted the potential cost to the government of reissuing Social Security numbers.

Borges, a U.S. Navy veteran, provided extensive documentation to support his claims, including emails and memos. His attorney, Andrea Meza, stated that Borges could no longer work for the Social Security Administration in good conscience due to the observed issues. The findings were shared with the Office of Special Counsel and members of Congress.

In response to the allegations, the Social Security Administration stated that they take whistleblower complaints seriously. The agency maintains that personal data is stored in secure environments with robust safeguards. They also stated that the data referenced in the complaint is stored in a long-standing environment used by the agency and is isolated from the internet. High-level officials have access to the system with oversight from the Information Security team. The agency stated they are unaware of any compromise to the environment and are committed to protecting sensitive personal data.