Whistleblower exposes DOGE's risky handling of Social Security data

In August 2025, Charles Borges, the chief data officer of the U.S. Social Security Administration, submitted a whistleblower complaint regarding the Department of Government Efficiency (DOGE). He alleged that DOGE officials copied sensitive data belonging to over 300 million Americans, which included Social Security numbers, names, and dates of birth. This sensitive information was uploaded to a vulnerable cloud server without the necessary security measures, potentially exposing it to identity theft and other malicious activities. Borges claimed that the actions by DOGE violated federal statutes and regulations, highlighting a culture of negligence within the department. He pointed out that despite being the chief data officer, he was excluded from discussions regarding this data transfer. His concerns were compounded by feelings of isolation, strife, and a pervasive culture of fear within the agency, ultimately leading him to resign from his position. The complaint was filed with the Office of Special Counsel and several congressional committees, further escalating the issue to the national stage. Borges's allegations shed light on serious systemic failures concerning data security protocols at the SSA and the need for proper oversight in handling personal data. The implications of these breaches could result in unprecedented harm, including the re-issuing of Social Security numbers to millions of people if the data were to be compromised. The whistleblower's disclosure gained traction as it was reported that DOGE had previously been granted significant access to sensitive personal data in an effort to eliminate fraud within the federal government. However, experts have since disputed the extent of fraud within the Social Security system, suggesting that the access provided to DOGE may have been unwarranted. Despite a federal judge temporarily blocking DOGE's access to the SSA data earlier in the year, the Supreme Court's reversal soon afterward allowed them to bypass restrictions. Borges's claims indicate a compelling need for robust data security measures and accountability in the handling of sensitive information.