Social Security Administration: The Social Security data breach is a national-security disaster that could hurt Americans for the rest of their lives: whistleblower

Former SSA Chief Data Officer Alleges Massive Social Security Data Breach in Cloud Mismanagement

A whistleblower has raised alarm over a potential national security disaster involving the personal data of every American with a Social Security number. Chuck Borges, who served as the Social Security Administration’s (SSA) chief data officer until his resignation in August, filed a complaint alleging that employees of the Department of Government Efficiency (DOGE) uploaded a copy of the SSA’s entire database to an unsecured cloud environment without proper oversight.

The exposed data reportedly includes names, Social Security numbers, and addresses sensitive information that could leave millions vulnerable to identity theft and fraud for decades. Borges described the breach as a "national-security disaster" with lifelong consequences for affected individuals, urging congressional investigation into the government’s handling of the data.

The incident highlights critical gaps in federal data security protocols, particularly around third-party cloud storage and access controls. No timeline for the alleged breach has been confirmed, but the implications extend to every U.S. citizen who has ever held a Social Security number. The SSA has not publicly responded to the allegations.

Source: https://www.marketwatch.com/story/the-social-security-data-breach-is-a-national-security-disaster-that-could-hurt-americans-for-the-rest-of-their-lives-whistleblower-fdb1254d?gaa_at=eafs&gaa_n=AWEtsqcx0Slz9RvNH03KOudg94BAcGjmimwkOUkRNM-FrSAL083JrUp6Z4dO&gaa_ts=698b2203&gaa_sig=7hBRdvcJA9CN0n5OqWler_D4r8M12YA87d3YQSpLGtSRO05ZH7YdrZBzK32u8FN-f3rYC5z8sB7-w_nC8QaSow%3D%3D

Social Security Disability Law Center, LLC cybersecurity rating report: https://www.rankiteo.com/company/social-security-disability-law-center-llc

"id": "SOC1770725796",
"linkid": "social-security-disability-law-center-llc",
"type": "Breach",
"date": "2/2026",
"severity": "100",
"impact": "5",
"explanation": "Attack threatening the organization's existence"

{'affected_entities': [{'customers_affected': 'Every U.S. citizen who has ever '
                                              'held a Social Security number',
                        'industry': 'Public Sector',
                        'location': 'United States',
                        'name': 'Social Security Administration (SSA)',
                        'size': 'Large',
                        'type': 'Government Agency'}],
 'attack_vector': 'Cloud Mismanagement',
 'data_breach': {'number_of_records_exposed': 'Entire SSA database '
                                              '(potentially all U.S. citizens '
                                              'with a Social Security number)',
                 'personally_identifiable_information': 'Yes',
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['Names',
                                              'Social Security numbers',
                                              'Addresses']},
 'description': 'A whistleblower has raised alarm over a potential national '
                'security disaster involving the personal data of every '
                'American with a Social Security number. Chuck Borges, former '
                'SSA Chief Data Officer, alleged that employees of the '
                'Department of Government Efficiency (DOGE) uploaded a copy of '
                'the SSA’s entire database to an unsecured cloud environment '
                'without proper oversight. The exposed data includes names, '
                'Social Security numbers, and addresses, leaving millions '
                'vulnerable to identity theft and fraud.',
 'impact': {'brand_reputation_impact': 'Severe',
            'data_compromised': 'Names, Social Security numbers, addresses',
            'identity_theft_risk': 'High',
            'legal_liabilities': 'Potential',
            'systems_affected': 'SSA database'},
 'investigation_status': 'Pending',
 'lessons_learned': 'Critical gaps in federal data security protocols, '
                    'particularly around third-party cloud storage and access '
                    'controls',
 'post_incident_analysis': {'root_causes': 'Unsecured cloud environment, lack '
                                           'of proper oversight'},
 'recommendations': 'Improve oversight of cloud storage, enforce stricter '
                    'access controls, conduct congressional investigation',
 'references': [{'source': 'Whistleblower complaint by Chuck Borges'}],
 'regulatory_compliance': {'legal_actions': 'Potential congressional '
                                            'investigation'},
 'threat_actor': 'Department of Government Efficiency (DOGE) employees',
 'title': 'Alleged Massive Social Security Data Breach in Cloud Mismanagement',
 'type': 'Data Breach',
 'vulnerability_exploited': 'Unsecured cloud environment, lack of proper '
                            'oversight'}