Data leak

DOGE Uploads Sensitive Social Security Administration Data to External Cloud Server

πŸ“… 2026-01-22
Primary Source β†—

Incident Details

The Department of Government Efficiency (DOGE) β€” the advisory body established by the Trump administration β€” was reported to have transferred sensitive Social Security Administration (SSA) data to an external cloud server outside of SSA’s secure federal information systems. The data transfer raised severe concerns about the security and privacy of Social Security records for approximately 280 million Americans, including SSNs, benefit payment records, and disability status information. Multiple privacy advocacy groups and former SSA officials raised alarms about inadequate data protection for the transferred data. Congressional oversight committees were notified. The incident prompted lawsuits from privacy organizations seeking to halt further unauthorized data transfers. The action raised questions about compliance with the Privacy Act of 1974, the Federal Information Security Management Act (FISMA), and SSA’s own data protection policies.

Technical Details

Initial Attack Vector
DOGE (Department of Government Efficiency) transferred sensitive Social Security Administration data to an external cloud server without standard federal data security controls

Timeline

  1. 2026-01-22 Breach occurred
  2. 2026-01-22 Publicly disclosed