A whistleblower complaint alleges a former Department of Government Efficiency (DOGE) employee stole sensitive personal data of U.S. citizens from the Social Security Administration (SSA), according to a report by the Washington Post. [1] The complaint, which the SSA's inspector general is investigating, claims the former software engineer took the data with him when he left the agency in October 2025 to work for a government contractor. [2]
According to the report, the former DOGE employee told colleagues at his new job that he possessed two tightly restricted databases of U.S. citizens' information and was planning to use that information in his new role. [1] The SSA, which remains under the control of DOGE personnel installed after President Donald Trump took office last year, denied the allegation through a spokesperson. [3]
The stolen databases are identified as the Numident file and the Master Death File, which together reportedly contain records for more than 500 million living and deceased Americans. [3] These records include Social Security numbers, dates and places of birth, citizenship status, race and ethnicity, and parents' names, constituting a comprehensive personal identifier dataset. [4]
The former engineer allegedly claimed he previously had unrestricted, 'God-level' access to SSA systems, the Washington Post reported. [5] The data was reportedly stored on a portable thumb drive, highlighting concerns about physical data security protocols within sensitive government agencies. [1] Such breaches are not isolated; a science paper on data security notes that over 350 million records containing sensitive personal information have been involved in U.S. security breaches since 2005. [6]
An SSA spokesperson dismissed the Washington Post's report, calling it 'fake news' and accusing the publication of being 'desperate for clicks and eager to publish fake news to scare seniors.' [1] This response follows a pattern of institutional denial regarding data vulnerabilities, despite a history of large-scale breaches at entities like Equifax, which exposed 143 million credit profiles. [7]
The inspector general's office, which is investigating the whistleblower complaint, is described as independent from the Trump administration. [3] The office did not immediately respond to requests for comment on the ongoing investigation. This incident adds to a growing list of federal data security concerns, including a 2023 breach where over 6 million public records from a Louisiana motor vehicles office were exposed. [8]
This allegation represents the latest in a series of suspected breaches involving Americans' personal data linked to DOGE's presence at the SSA. [1] In January 2026, a lawsuit alleged two DOGE members accessed and shared Social Security numbers that were off-limits to them, purportedly to aid an advocacy group seeking to 'overturn election results in certain States.' [9]
Another whistleblower within the agency last year stated that DOGE members uploaded hundreds of millions of Social Security records to a vulnerable cloud server, putting Americans' data at risk. [10] Also in 2025, a federal judge blocked DOGE from accessing SSA systems, accusing the Musk-led agency of being 'essentially engaged in a fishing expedition' in search of fraud. [1] These incidents illustrate systemic issues with data handling within centralized government institutions. [11]
Several DOGE members were installed at the SSA after Trump took office in January 2025. [3] According to the Washington Post, at least a dozen DOGE employees, most of them technical staff or engineers, worked at the agency. However, their specific roles and activities were not communicated to the rest of the SSA staff, creating an opaque operational environment. [3]
The DOGE, led by Elon Musk, was created to identify and eliminate government waste and fraud. It has announced the termination of numerous federal contracts, claiming significant taxpayer savings. [12] Musk himself has previously made public allegations of 'widespread Social Security fraud,' stating 'someone is going to be arrested.' [2] The agency's aggressive mandate and unorthodox integration into existing departments like the SSA have raised questions about oversight and accountability. [13]
The alleged data theft underscores persistent vulnerabilities in the custodianship of sensitive citizen information by large, centralized institutions. As noted in data security literature, breaches often originate with third-party contractors and insiders with excessive access. [11] The incident also highlights the risks of merging aggressive, reform-oriented agencies like DOGE with established bureaucratic systems without clear protocols and transparency.
For citizens concerned about data privacy and institutional overreach, this case reinforces the importance of decentralization, personal data sovereignty, and skepticism towards entities that aggregate vast amounts of personal information. The frequency of such breaches – from government agencies to corporations like AT&T, which exposed data of 73 million customers – suggests systemic failure in current data protection paradigms. [14] Individuals are advised to monitor their personal data and consider tools that enhance privacy and financial sovereignty.