Social Security Administration

Summary

The Social Security Administration experienced a data exposure when operatives from the Department of Government Efficiency uploaded a live copy of its database to an unsecured third‑party server, allegedly containing Social Security numbers and personal details of most living Americans. A whistleblower claimed the upload enabled potential misuse of the data for targeting individuals, and lawsuits have questioned whether the breach could be the largest in the nation’s history. Separately, a former department employee was accused of copying the agency’s Numident and Master Death File onto a USB drive, asserting access to records of over five hundred million people, both living and deceased. The agency has denied the allegations, calling them baseless, while officials continue to investigate the extent of the exposure and its possible consequences.

Motives

Detailed motive labels are available to members.

TTPs

Detailed technique labels are available to members.

Description

After the Department of Government Efficiency led by Elon Musk began its restructuring of federal agencies, it entered the Social Security Administration and, according to whistleblower testimony, uploaded a live copy of the agency’s most sensitive database to an unsecured third‑party server. The whistleblower alleged that this database contained the Social Security numbers and associated personal information of most living Americans, describing it as the nation’s most sensitive data. The Social Security Administration stated in court filings that it does not know for sure what was on the server, but noted that DOGE had signed an agreement with an outside political advocacy group under the pretense of seeking evidence of voter fraud, a claim that President Trump continued to promote without evidence. Concerns were raised that the exposed data could be misused to target Americans for spurious reasons, and two senior House Democrats investigating DOGE’s activities at the SSA warned that the exposure could very well be the largest data breach in the country’s history.

Congressional representatives and court documents later indicated that DOGE may have provided the data to foreign political groups under the guise of detecting election fraud, heightening fears that the information could be used to target citizens unjustifiably. The incident remained under investigation, with lawsuits proceeding in federal court as parties sought to determine what had been stored on the server and who had accessed it. In a separate allegation, a former DOGE employee was said to have stolen a database containing the Social Security numbers of over 500 million Americans by copying it onto a USB flash drive; a whistleblower, identified as a former software engineer at DOGE, claimed the employee possessed two highly restricted databases called Numident and Master Death File, which together held records of more than 500 million living and deceased Americans, including details such as place of birth, date of birth, citizenship, race, ethnicity, and parents’ names, and that the employee had described having god‑level unlimited access to the SSA during his tenure. The former employee reportedly said he intended to use the stolen information at a new company after leaving DOGE.

In response to these allegations, a spokesperson for the Social Security Administration denied that any former employee had stolen personal information, characterizing the Washington Post report as desperate for clicks and intent on publishing fake news to scare seniors. The agency maintained that the incident was still under investigation and that the full scope of what had been uploaded or copied remained uncertain. As of the latest reports, the breach continued to be litigated, with ongoing concerns about the potential misuse of the exposed data and its implications for the privacy of millions of Americans. No further details about remediation or technical containment were provided in the source material.

Sources

Sources available to members: 4 sources.