Massive Security Lapse Puts Millions at Risk
A new whistleblower disclosure has unveiled an astonishingly dangerous data lapse at the Social Security Administration (SSA), tracing directly to Elon Musk’s so-called “Department of Government Efficiency” (DOGE). SSA’s Chief Data Officer, Charles Borges, alleges in his official complaint that Musk’s DOGE operatives copied the personal data of over 300 million Americans onto a poorly secured private cloud server. This trove – essentially the entire Social Security database containing names, birth dates, family information, and Social Security numbers – was siphoned out of its secure environment and placed in a shadow system accessible only to DOGE personnel. The complaint charges that this was done without independent oversight or adequate safeguards, in flagrant violation of federal privacy laws and basic cybersecurity practices. The result is a looming security nightmare: every U.S. citizen’s most sensitive data now resides on an off-book server, one that is alarmingly vulnerable to abuse or breach.
Borges – a Navy veteran and career data expert who only joined SSA in January 2025 – paints a vivid picture of **“serious data security lapses” orchestrated by DOGE officials that put the privacy and safety of virtually the entire nation in jeopardy. According to his disclosure, DOGE team members at SSA created a live copy of the agency’s master database (the NUMIDENT system) containing Social Security card applications and identification records. The copy was moved into a special Amazon Web Services cloud instance set aside for DOGE’s use, but configured with far weaker security controls than standard SSA systems. In effect, an offshoot of Musk’s hand-picked “efficiency” squad gained unfettered, exclusive access to the personal records of hundreds of millions of Americans – with minimal logging, oversight, or encryption to shield that data. Borges flatly describes these actions as “gross mismanagement” and “abuse of authority,” warning that they have created a “substantial and specific threat” to public safety. In no uncertain terms, this mass data grab is a disaster waiting to happen – one entirely manufactured from within the government by Musk’s DOGE insiders.
Ignored Warnings and Intentional Vulnerabilities
Disturbingly, internal SSA cybersecurity officials did flag the enormous risks at the time – only to be brushed aside by DOGE’s appointees. An SSA risk assessment in June (just before the data copy) starkly concluded that any unauthorized access to the NUMIDENT database would have “catastrophic” consequences for Americans and agency operations. Career experts explicitly recommended “production data should not be used” for DOGE’s project, emphasizing that copying live sensitive data was far too dangerous. Those dire warnings were brushed aside. On June 10, mere days after a court order gave DOGE the green light to access SSA data, a DOGE-linked manager named John Solly formally requested the full export of the Social Security database to the private cloud enclave. By late June, the transfer was complete – despite the chorus of concern from SSA’s professional staff – after a DOGE-affiliated official approved the data copy over internal objections. In July, SSA’s Trump-appointed Chief Information Officer Aram Moghaddassi (himself a former DOGE operative) cemented this reckless move by signing an official “Authorization to Operate” for the new system. In that document, Moghaddassi baldly declared “the business need is higher than the security risk” and that he “accept[s] all risks” of implementing the copied database. This astonishing statement – essentially prioritizing Musk’s agenda over the security of Americans’ data – shows a willful disregard for cybersecurity at the highest levels. It was a deliberate decision to weaken protections, made by officials who explicitly acknowledged the dangers but proceeded nonetheless.
Multiple signs indicate these players knew exactly how perilous their actions were. Borges reveals that SSA’s leadership even discussed the possibility of having to reissue Social Security numbers to every American if the data were compromised – a nightmarish contingency that shows how fully they understood the stakes. Indeed, if hackers or malicious insiders exploit this trove, the fallout would be enormous. The complaint warns that a breach would unleash widespread identity theft and fraud, disrupt essential benefits like Medicare and food assistance, and force the government to undertake the colossal task of replacing every Social Security number. In essence, Musk’s DOGE team put the entire country’s financial identities on the chopping block. That no actual leak has been detected yet (as SSA’s spokespeople insist) is mere luck; the vulnerabilities are there by design, and the clock is ticking. Borges spent weeks urgently pressing his superiors to address these gaping risks, only to be stonewalled. Facing institutional indifference, he took the drastic but necessary step of blowing the whistle to federal watchdogs and Congress – sounding an alarm that, by any objective measure, should have been blaring from the start.
“Tech Bros” Gone Rogue: Unqualified Operatives and Shady Backgrounds
How could such an egregious security breach be perpetrated from inside the government? The answer lies in the composition of Musk’s DOGE cadre – a cast of unvetted, under-qualified, and apparently overzealous individuals whom Musk installed across federal agencies under the banner of “efficiency.” At SSA, Borges’ complaint singles out Edward “Big Balls” Coristine as a prime example. Coristine is a 19-year-old tech wunderkind plucked by Musk’s team with no prior government experience – and with a seriously troubling history. Investigative records show that just two years ago, this young coder provided technical support to a cybercrime ring known as “EGodly,” which trafficked in stolen data and even boasted about hacking government emails and cyberstalking an FBI agent. Incredibly, Musk knew of and championed this individual: he publicly cheered Coristine – nicknamed “Big Balls” online – and proclaimed “Big Balls is awesome” on his social media platform, celebrating a teenager whose past alliances literally included a criminal hacking gang.
Coristine is emblematic of the so-called “DOGE kids” – a group of coders in their late teens and early twenties whom Musk embedded into government with near-fanatical trust despite their alarming lack of credentials. In Coristine’s case, that lack of judgment veered into sheer negligence: Reuters revealed that he had operated a company supplying services to EGodly’s illicit data-leak website, which earned him effusive thanks from the criminals in 2023. Putting someone with that background in proximity to 300 million Social Security records is beyond foolish – it is outright irresponsible. Musk’s DOGE team effectively handed the keys to the kingdom to a person who had already demonstrated wanton disregard for data security in the private sector. Little wonder that lawmakers and watchdogs have accused DOGE of operating with a “wanton disregard for security protocols and transparency” long before this incident. The new disclosure validates those fears in the starkest way possible.
And Coristine is hardly the only concern. The entire DOGE operation at SSA was staffed by Musk’s loyalists and cronies, many of whom had equally dubious qualifications or conflicts. John Solly, who triggered the database copy, was a former Musk team intern turned SSA advisor, eager to please his patrons by executing their data grab. Michael Russo, who approved it, was another DOGE transplant placed in SSA management. Aram Moghaddassi, the CIO who signed off despite the risks, was parachuted into his role in June solely thanks to DOGE’s influence. In short, Musk had seeded the agency with operatives who answer to him first – people willing to bend or break rules to advance an agenda, even if it jeopardizes the public. Many of these figures also came from outside the normal security clearance channels and inside Musk’s personal network, raising serious questions about loyalty and oversight. The whistleblower’s evidence even suggests that DOGE personnel attempted to conceal their tracks regarding the data they accessed in other cases, indicating an awareness that their actions were illicit. This is a textbook case of the fox guarding the henhouse: Musk’s hand-picked “efficiency” crew has proven more adept at sabotaging federal information security than any external hacker could dream of.
To illustrate the dangerous players involved, consider the key DOGE-linked individuals at SSA and their actions:
| Name | Role & Background | Actions at SSA |
| Edward “Big Balls” Coristine | 19-year-old DOGE coder; past ties to cybercriminals (provided tech support to a hacking group). Praised by Musk as “awesome”. | Had administrator access to SSA’s copied data; emblematic of DOGE’s inexperienced “kids” entrusted with America’s personal info. His involvement epitomizes the idiocy of employing someone with known cybercrime links in a sensitive data operation. |
| John Solly | Former DOGE staffer placed at SSA (IT advisor). | Initiated the request on June 10, 2025 to copy the entire NUMIDENT database to a DOGE-only cloud environment. Acted immediately after court clearance, despite internal objections. |
| Michael Russo | DOGE-affiliated SSA official (brought in to SSA management). | Approved and oversaw the data transfer in late June 2025, overriding SSA cybersecurity warnings. Enabled the creation of the unsecured data copy. |
| Aram Moghaddassi | SSA Chief Information Officer as of June 2025; former DOGE associate appointed to SSA by Trump administration. | Authorized the new system’s operation in July 2025, explicitly accepting all security risks and elevating DOGE’s “business needs” over data safety. His decision formalized the breach of protocol. |
| Charles Borges | SSA Chief Data Officer (career civil servant, Navy vet). | Blew the whistle on DOGE’s data copying scheme after his internal warnings were ignored. Documented “systemic security violations” by DOGE personnel and alerted oversight bodies to prevent a catastrophe. |
The roster makes clear that Musk’s DOGE experiment imported a group of dangerously unfit actors straight into critical federal systems. Unseasoned youths, outside hires with questionable loyalties, and aggressively ideological managers were given sweeping authority over data that they barely comprehend the importance of protecting. The “general idiocy” at play is mind-boggling: those in charge either failed to vet these individuals or willfully ignored their red flags. By empowering such individuals, Musk has effectively cultivated an environment that is ripe for security breaches and abuse. Even the appearance of one team member’s past ties to criminal hackers should have been disqualifying – yet under Musk’s watch, it was practically a badge of honor.
Musk’s Agenda: Reckless Ambition Over Public Safety
All of this unfolded under the aegis of Elon Musk’s grand (and dubiously named) Department of Government Efficiency, an initiative in Donald Trump’s second presidency that has rapidly embedded Musk’s hand-picked “troubleshooters” across agencies. While pitched as a way to streamline bureaucracy, DOGE has functioned more like a shadow government operation, answerable chiefly to Musk and Trump and shrouded in secrecy. Officially, Musk was put “in charge” of this effort – Trump himself said so – and a court even affirmed him as the DOGE leader. Empowered by this mandate, Musk’s team has slashed headcounts, seized control of IT systems, and delved into data troves far beyond what normal officials would ever be allowed. From the start, Musk’s vision of “efficiency” appears to have been less about prudent management and more about unfettered access and power. The Social Security data episode is the most evident proof yet: Musk’s operatives were so intent on rooting around for supposed fraud or waste that they treated Americans’ privacy as collateral damage.
In fact, Musk’s statements betray his cavalier and combative attitude toward Social Security. He has baselessly smeared the nation’s retirement system as a “Ponzi scheme” and trumpeted an outrageous claim that $700 billion in annual payments are fraudulent. These claims have zero credible evidence behind them, but they served to justify DOGE’s incursion into SSA records – ostensibly to uncover a mythical “fraud epidemic” among beneficiaries. Government lawyers noted that Musk’s team wanted unlimited access to verify spurious theories that millions of dead people receive benefits. In reality, as a federal judge sharply observed in March, “the DOGE team is essentially engaged in a fishing expedition… based on little more than suspicion”. That judge, Ellen Lipton Hollander, temporarily blocked DOGE’s access at the time, lambasting the Musk-led effort for its lack of a concrete rationale and the enormous privacy risks it posed. She noted DOGE “never identified even a single reason” to justify “unlimited access” to the entire Social Security dataset – an access that “would risk exposing personal, confidential, sensitive information” of millions. This scathing judicial rebuke reveals that Musk’s crusade was founded on ideology and hubris, rather than evidence. Yet, undeterred by the initial court block, Musk’s allies appealed, and a 6–3 conservative majority on the Supreme Court soon paved the way for DOGE to invade the SSA’s files in June. Armed with that court approval, Musk’s foot soldiers moved almost immediately to do what they had planned all along – vacuum up the data – proving the judge’s concerns were entirely warranted.
Elon Musk’s personal fingerprints are all over this debacle. He hand-selected DOGE’s personnel, promoted their exploits on social media, and encouraged a culture of contempt for government norms. When journalists and officials tried to shed light on DOGE’s composition, Musk lashed out by accusing them of “doxing” his staff – attempting to paint basic accountability as a crime. This tactic of deflection shows Musk’s instinct to shield his operation from scrutiny even as it infiltrated public institutions. Meanwhile, Musk hypocritically imposed draconian standards on rank-and-file federal workers (at one point decrying remote work, even as he himself worked remotely as the CEO of DOGE), all while his hires ran roughshod over vital security protocols. It is a portrait of breathtaking arrogance: an unelected tech billionaire playing puppet-master in government, eager to break things but dismissive of the consequences. Musk cultivated an image as a disruptor who “gets things done,” yet what DOGE has done is disrupt critical safeguards and imperil Americans’ data on an unprecedented scale.
Fallout: Calls to Rein in “Dumbass” Actions Before It’s Too Late
The revelations in Borges’ whistleblower complaint have prompted immediate outcry and demands for action – and rightly so. Experts warn that the U.S. government may be on the brink of one of the worst data security disasters in its history, entirely self-inflicted by the incompetence of Musk’s team. Lisa Gilbert, co-president of Public Citizen, did not mince words: “Letting a 19-year-old kid move everyone’s personal data onto a vulnerable server is yet another example of how unfit the administration is… We can’t afford to wait until there is a catastrophic misuse of this data; we need to immediately rein in the tech bros who invaded our government through DOGE.”. Gilbert’s alarm encapsulates the consensus of cybersecurity professionals and public interest watchdogs: the DOGE operation has gone off the rails and become a direct threat to the public. It is difficult to overstate the idiocy of what Musk and his DOGE acolytes have done here. By hiring people previously entangled with cybercriminals and then granting them access to the crown jewels of American data, they have created the perfect conditions for espionage, identity theft, and chaos. The vulnerabilities and risks introduced by this stunt are so severe that even hinting at them internally triggered talk of nationwide Social Security reissuance—a desperate fix that would cost untold billions and sow confusion for years. In the words of one senior official, the prospect of a breach under these conditions “is a scandal” of immense proportions.
Thankfully, the mechanisms of accountability are now taking effect. Borges has filed his complaint through the proper legal channels, with the nonprofit Government Accountability Project providing him counsel and forwarding evidence to the U.S. Office of Special Counsel and key members of Congress. Lawmakers on oversight committees have already been investigating DOGE’s dark dealings for months, and this bombshell will add even more fuel to those efforts. There are growing calls for an immediate independent audit of all DOGE activities across the government, as well as urgent steps to secure or shut down the rogue data systems that Doge operatives have set up. Simply put, the “no holds barred” indulgence Musk was given must end – before it produces an irreparable catastrophe. As a start, Congress and agency heads can revoke the extraordinary access that DOGE personnel have been given, restore proper oversight in IT departments, and remove any DOGE staff who flouted security rules (at the very least, nobody with the handle “Big Balls” should be anywhere near sensitive data systems). The lessons here are painfully obvious. Handing over critical government infrastructure to a band of unaccountable amateurs was a colossal mistake – one born of ideological zeal and Silicon Valley hubris.
Elon Musk’s DOGE experiment has proven an unmitigated fiasco for governance and security. The very initiative that claimed to “efficiently” improve government has instead undermined it from within, exposing all Americans to new dangers. Musk and his cohorts pursued their agenda with reckless abandon, exhibiting an almost cavalier disregard for laws, regulations, and the fundamental duty to safeguard public data. In doing so, they have earned a place in history’s hall of shame for administrative malpractice. The Borges disclosure is more than a whistleblower report – it is an urgent warning that must shatter the myth of Musk as a benign innovator in the public sphere. What we see instead is an abuse of power marked by staggering incompetence: a “dumbass” scheme that imperils the privacy and security of 300 million people. The time is now for those in power to rein in this dangerous farce. If leaders fail to act and a breach occurs, Musk’s DOGE will go down as one of the most preventable and foolish disasters ever inflicted on the American public by its government.
References (APA):
Brumfiel, G. (2025, August 26). Whistleblower says Trump officials copied millions of Social Security numbers. NPR. https://www.npr.org/2025/08/26/1196348732/whistleblower-trump-doge-social-security-data
Robins-Early, N. (2025, August 26). Elon Musk’s Doge put sensitive social security data at risk, whistleblower says. The Guardian. https://www./us-news/2025/aug/26/doge-social-security-elon-musk
Satter, R. (2025, March 26). Exclusive: DOGE staffer ‘Big Balls’ provided tech support to cybercrime ring, records show. Reuters. https://www./world/us/doge-staffer-big-balls-provided-tech-support-cybercrime-ring-records-show-2025-03-26/
Woodward, A. (2025, August 26). Whistleblower claims DOGE compromised Social Security data of hundreds of millions of Americans. The Independent. https://www.independent.co.uk/news/world/americas/us-politics/doge-social-security-whistleblower-b2814600.html


You must be logged in to post a comment.