Social Security Administration: The Social Security data breach is a national-security disaster that could hurt Americans for the rest of their lives: whistleblower

Former SSA Chief Data Officer Alleges Massive Social Security Data Breach, Calls for Congressional Investigation

A whistleblower has raised alarm over a potential national security disaster involving the personal data of every American with a Social Security number. Chuck Borges, who served as the Social Security Administration’s (SSA) chief data officer until his resignation in August, claims that employees of the Department of Government Efficiency (DOGE) uploaded a copy of the SSA’s entire database to an unsecured cloud environment, exposing sensitive information including names, Social Security numbers, and addresses to potential misuse.

Borges, who filed a formal complaint, asserts that the government’s mismanagement of this data has placed millions at risk of fraud and identity theft, with consequences that could last a lifetime. The alleged breach, if confirmed, would represent one of the most severe exposures of U.S. citizen data in history, prompting calls for a congressional investigation.

The incident underscores vulnerabilities in federal data handling and raises critical questions about oversight and security protocols within government agencies. No official response from the SSA or DOGE has been reported as of yet.

Source: https://www.marketwatch.com/story/the-social-security-data-breach-is-a-national-security-disaster-that-could-hurt-americans-for-the-rest-of-their-lives-whistleblower-fdb1254d?gaa_at=eafs&gaa_n=AWEtsqc6wrtCEvOeOt_DQhhI-ImmoTRjJS9_H0kqpNewynipyUnhF_G7Qy1w&gaa_ts=69866678&gaa_sig=yQZ__y15iVlSyy2pOmsS6xkJR9OYrqfB8DWrcIyT_WopLugBFmxP8DKUUNG0AUiRVg7zve7wyqvqK-HBVZn6aw%3D%3D

Social Security Advisory Board cybersecurity rating report: https://www.rankiteo.com/company/social-security-advisory-board

"id": "SOC1770414951",
"linkid": "social-security-advisory-board",
"type": "Breach",
"date": "8/2025",
"severity": "100",
"impact": "5",
"explanation": "Attack threatening the organization's existence"

{'affected_entities': [{'customers_affected': 'Every American with a Social '
                                              'Security number (potentially '
                                              'all U.S. citizens)',
                        'industry': 'Public Sector',
                        'location': 'United States',
                        'name': 'Social Security Administration (SSA)',
                        'size': 'Large',
                        'type': 'Government Agency'}],
 'attack_vector': 'Insider Threat / Misconfiguration',
 'data_breach': {'number_of_records_exposed': 'Entire SSA database '
                                              '(potentially all U.S. citizens)',
                 'personally_identifiable_information': 'Yes',
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['Personally Identifiable '
                                              'Information (PII)',
                                              'Social Security numbers',
                                              'Addresses']},
 'description': 'A whistleblower has raised alarm over a potential national '
                'security disaster involving the personal data of every '
                'American with a Social Security number. Chuck Borges, former '
                'SSA chief data officer, claims that employees of the '
                'Department of Government Efficiency (DOGE) uploaded a copy of '
                'the SSA’s entire database to an unsecured cloud environment, '
                'exposing sensitive information including names, Social '
                'Security numbers, and addresses to potential misuse.',
 'impact': {'brand_reputation_impact': 'Severe',
            'data_compromised': 'Names, Social Security numbers, addresses',
            'identity_theft_risk': 'High',
            'legal_liabilities': 'Potential',
            'systems_affected': 'SSA database'},
 'investigation_status': 'Ongoing (alleged)',
 'motivation': 'Mismanagement of data (alleged)',
 'post_incident_analysis': {'root_causes': 'Alleged mismanagement of data and '
                                           'unsecured cloud environment'},
 'references': [{'source': 'Whistleblower complaint by Chuck Borges'}],
 'regulatory_compliance': {'legal_actions': 'Potential congressional '
                                            'investigation',
                           'regulations_violated': ['Potential violations of '
                                                    'federal data protection '
                                                    'laws']},
 'threat_actor': 'Department of Government Efficiency (DOGE) employees',
 'title': 'Alleged Massive Social Security Data Breach by Former SSA Chief '
          'Data Officer',
 'type': 'Data Breach',
 'vulnerability_exploited': 'Unsecured cloud environment'}