WASHINGTON (AP) — More than 300 million Americans' Social Security data was put at risk after Department of Government Efficiency officials uploaded sensitive information to a cloud account not subject to oversight, according to a whistleblower disclosure submitted to the special counsel's office Tuesday.
Whistleblower Charles Borges, who worked as the chief data officer at the Social Security Administration since January, said the potential sensitive information that risks being released includes
health diagnoses, income, banking information, familial relationships and personal biographic data.
“Should bad actors gain access to this cloud environment, Americans may be susceptible to widespread identity theft, may lose vital healthcare and food benefits, and the government may be responsible for re-issuing every American a new Social Security Number at great cost,” said the complaint.
The complaint was submitted by the Government Accountability Project and addressed to House and Senate oversight lawmakers. It requests that authorities “take appropriate oversight action.”
The whistleblower report is just the latest complaint against President Donald Trump's DOGE and the unprecedented access it was given by the Republican administration to the vast troves of personal data across the government under the mandate of eliminating waste, fraud and abuse. Labor and retiree groups sued SSA earlier this year for allowing DOGE to access Americans’ sensitive agency data, though a divided appeals panel decided this month that DOGE could access the information.
SSA said in a statement that it takes whistleblower complaints seriously but seemed to downplay Borges' accusations.
“SSA stores all personal data in secure environments that have robust safeguards in place to protect vital information. The data referenced in the complaint is stored in a long-standing environment used by SSA and walled off from the internet. High-level career SSA officials have administrative access to this system with oversight by SSA’s Information Security team. We are not aware of any compromise to this environment and remain dedicated to protecting sensitive personal data,” the agency wrote.
Borges’ complaint says he disclosed to his superiors that he believed the upload was an abuse of authority and poses a substantial threat to public health and safety, and potentially violates the law.
Andrea Meza, a lawyer representing Borges, said her client released the information “out of a sense of urgency and duty to the American public.”
