Whistleblower Claims DOGE Exposed Social Security Numbers and Sensitive Data on Vulnerable Server

In June, a whistleblower raised serious concerns about the safety of personal data held by the Social Security Administration (SSA). Charles Borges, the chief data officer, claimed that sensitive information of millions of Americans, including Social Security numbers, was stored on a poorly secured cloud server.

Borges’ complaint accuses the SSA’s Chief Information Officer, Aram Moghaddassi, of violating rules by allowing the creation of a live copy of Social Security data in a cloud environment. This action, he argued, breaches federal laws and poses a significant risk to public safety.

The compromised file reportedly contains identifying information of over 300 million Americans. Borges warned that if this data fell into the wrong hands, it could lead to widespread identity theft. Victims might lose essential benefits, and the government would face enormous costs in re-issuing new Social Security numbers.

In March, Borges said that certain staffers had excessive access to sensitive databases. A federal judge originally blocked access, but the Supreme Court later overturned that decision. Following this, there was a move to move the SSA’s database, known as “Numident,” to a private server. Concerns arose that this change would lack necessary security measures, leaving crucial data vulnerable.

The Numident system holds not just Social Security numbers but also personal details like names, addresses, and birthplaces. An internal security assessment had previously flagged the move to a cloud server as “high-risk,” citing the potential for catastrophic consequences if breached.

Moghaddassi reportedly justified his decision, stating the business needs outweighed security risks. However, Borges argued that there were calls for better oversight that went unheeded.

When questioned, an SSA spokesperson insisted that the agency takes whistleblower complaints seriously and claims the data is safely partitioned from the internet. The spokesperson noted they are not aware of any data being compromised.

This situation has led to debates on social media, with Senator Ron Wyden expressing concern over the implications of such data exposure. Borges, feeling a sense of duty, has offered to speak to Congress about his findings. His attorney, Andrea Meza, emphasized the importance of addressing these risks before it’s too late.

As we grapple with increasing security challenges, this case highlights the ongoing struggle between data access for efficiency and the critical need for rigorous security measures. With many firms and agencies moving to cloud-based solutions, a balance must be struck to protect sensitive personal information.

For further details, you can visit trustworthy sources like the Social Security Administration or explore findings on data security trends from the Identity Theft Resource Center.

Source link