Social Security Administration: The Social Security data breach is a national-security disaster that could hurt Americans for the rest of their lives: whistleblower

Former SSA Chief Data Officer Alleges Massive Social Security Data Breach, Calls for Congressional Investigation

A whistleblower has raised alarm over what he describes as a "national-security disaster" involving the exposure of sensitive Social Security Administration (SSA) data. Chuck Borges, who served as the SSA’s chief data officer until his resignation in August, alleges that employees of the Department of Government Efficiency (DOGE) uploaded a copy of the SSA’s entire database containing names, Social Security numbers, and addresses of every American with a Social Security number to an unsecured cloud environment.

Borges, who filed a formal complaint, claims the breach stems from government mismanagement and could leave millions vulnerable to fraud for decades. The incident, if confirmed, would represent one of the most severe data exposures in U.S. history, affecting current and former Social Security number holders.

The whistleblower has called for a congressional investigation, warning that the fallout could have lifelong consequences for affected individuals. The SSA has not publicly confirmed the breach, and details about the timeline, scope, and potential misuse of the data remain unclear. The allegations highlight growing concerns over federal data security practices and the risks of improper cloud storage oversight.

Source: https://www.marketwatch.com/story/the-social-security-data-breach-is-a-national-security-disaster-that-could-hurt-americans-for-the-rest-of-their-lives-whistleblower-fdb1254d?gaa_at=eafs&gaa_n=AWEtsqezfiZdtJVpq4_WI8OqR2hnB2N4QidddWsp5CZ3LatcO1pt4ceVCH3I&gaa_ts=6983cd2c&gaa_sig=eCSbWuqr04YnubLq68XgxLQStPGmsQM-BeNsDBE8UwZwdw6vo1ZT-QEiZEml8SJbor1WSZm9jxtsRnEJPIjDSQ%3D%3D

Social Security Administration cybersecurity rating report: https://www.rankiteo.com/company/ssa

"id": "SSA1770244647",
"linkid": "ssa",
"type": "Breach",
"date": "8/2025",
"severity": "100",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'customers_affected': 'Every American with a Social '
                                              'Security number (current and '
                                              'former holders)',
                        'industry': 'Public Sector',
                        'location': 'United States',
                        'name': 'Social Security Administration (SSA)',
                        'size': 'Large',
                        'type': 'Government Agency'}],
 'attack_vector': 'Improper Cloud Storage Oversight',
 'data_breach': {'number_of_records_exposed': 'Entire SSA database (all '
                                              'Americans with a Social '
                                              'Security number)',
                 'personally_identifiable_information': 'Names, Social '
                                                        'Security numbers, '
                                                        'addresses',
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': 'Personally Identifiable '
                                             'Information (PII)'},
 'description': 'A whistleblower alleges that employees of the Department of '
                'Government Efficiency (DOGE) uploaded a copy of the SSA’s '
                'entire database containing names, Social Security numbers, '
                'and addresses of every American with a Social Security number '
                'to an unsecured cloud environment. The breach is described as '
                "a 'national-security disaster' with potential lifelong "
                'consequences for affected individuals.',
 'impact': {'brand_reputation_impact': 'Severe',
            'data_compromised': 'Names, Social Security numbers, and addresses '
                                'of every American with a Social Security '
                                'number',
            'identity_theft_risk': 'High',
            'legal_liabilities': 'Potential',
            'systems_affected': 'Social Security Administration (SSA) '
                                'database'},
 'investigation_status': 'Ongoing (allegations not confirmed by SSA)',
 'post_incident_analysis': {'root_causes': 'Government mismanagement, improper '
                                           'cloud storage oversight'},
 'references': [{'source': 'Whistleblower complaint by Chuck Borges'}],
 'regulatory_compliance': {'legal_actions': 'Potential congressional '
                                            'investigation'},
 'threat_actor': 'Department of Government Efficiency (DOGE) employees',
 'title': 'Alleged Massive Social Security Data Breach',
 'type': 'Data Breach',
 'vulnerability_exploited': 'Unsecured cloud environment'}