Social Security Administration: The Social Security data breach is a national-security disaster that could hurt Americans for the rest of their lives: whistleblower

Former SSA Chief Data Officer Warns of Massive Social Security Data Breach

A whistleblower has raised alarms over a potential national security disaster involving the exposure of sensitive Social Security data for every American with or who ever had a Social Security number (SSN). Chuck Borges, the former chief data officer of the Social Security Administration (SSA), resigned in August and filed a complaint alleging that employees of the Department of Government Efficiency (DOGE) uploaded a copy of the SSA’s entire database to an unsecured cloud environment.

The breach, if confirmed, could expose names, SSNs, and addresses critical personal data vulnerable to fraud and identity theft. Borges described the incident as a "national-security disaster" with lifelong consequences for affected individuals, urging congressional investigation.

The SSA has not publicly confirmed the breach, but the allegations highlight systemic risks in government data handling. The incident underscores growing concerns over cybersecurity lapses in federal agencies and their potential long-term impact on millions of Americans.

Source: https://www.marketwatch.com/story/the-social-security-data-breach-is-a-national-security-disaster-that-could-hurt-americans-for-the-rest-of-their-lives-whistleblower-fdb1254d?gaa_at=eafs&gaa_n=AWEtsqfchFm_oUlXLwLXISe_bbFjbP-E18Kc1JjJ_-PbNXiGaUqMdfa8wKn9&gaa_ts=698ae7b6&gaa_sig=hXrqLhaaFU2ERn37AGV4Qv54t9u2j0D2zDt6Ehe91DgAlhXIJJRiUTRFzbq1JRQuCV2V1WmRyj6RrbpMVO0Vbw%3D%3D

Social Security Administration cybersecurity rating report: https://www.rankiteo.com/company/ssa

"id": "SSA1770710407",
"linkid": "ssa",
"type": "Breach",
"date": "2/2026",
"severity": "100",
"impact": "5",
"explanation": "Attack threatening the organization's existence"

{'affected_entities': [{'customers_affected': 'Every American with or who ever '
                                              'had an SSN',
                        'industry': 'Public Sector',
                        'location': 'United States',
                        'name': 'Social Security Administration (SSA)',
                        'size': 'Large',
                        'type': 'Government Agency'}],
 'attack_vector': 'Insider Threat / Misconfiguration',
 'data_breach': {'number_of_records_exposed': 'Entire SSA database (all '
                                              'Americans with an SSN)',
                 'personally_identifiable_information': 'Names, SSNs, '
                                                        'addresses',
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': 'Personally Identifiable '
                                             'Information (PII)'},
 'description': 'A whistleblower has raised alarms over a potential national '
                'security disaster involving the exposure of sensitive Social '
                'Security data for every American with or who ever had a '
                'Social Security number (SSN). The former chief data officer '
                'of the Social Security Administration (SSA) alleged that '
                'employees of the Department of Government Efficiency (DOGE) '
                'uploaded a copy of the SSA’s entire database to an unsecured '
                'cloud environment, risking exposure of names, SSNs, and '
                'addresses.',
 'impact': {'brand_reputation_impact': 'High',
            'data_compromised': 'Names, SSNs, addresses',
            'identity_theft_risk': 'High',
            'legal_liabilities': 'Potential',
            'systems_affected': 'SSA database'},
 'investigation_status': 'Ongoing (allegations not confirmed by SSA)',
 'post_incident_analysis': {'root_causes': 'Systemic risks in government data '
                                           'handling, unsecured cloud '
                                           'environment'},
 'references': [{'source': 'Whistleblower complaint by Chuck Borges'}],
 'regulatory_compliance': {'legal_actions': 'Potential congressional '
                                            'investigation'},
 'threat_actor': 'Department of Government Efficiency (DOGE) employees',
 'title': 'Potential Massive Social Security Data Breach',
 'type': 'Data Breach',
 'vulnerability_exploited': 'Unsecured cloud environment'}