A bombshell whistleblower is sounding the alarm on what could be the biggest risk to Social Security data in history.

Charles Borges, chief data officer for the Social Security Administration (SSA), filed a complaint in late August claiming that the Department of Government Efficiency (DOGE) violated the law by saving copies of all federal Social Security Numbers to a cloud server in June. He subsequently submitted his resignation.

Must Read

As reported in Forbes, the complaint notes that only DOGE has access to the server. The SSA and other oversight bodies are shut out. [1]

Borges warned that this lack of security and oversight creates “enormous vulnerabilities.”

The DOGE cloud database — Numident — contains “the name of the applicant, place and date of birth, citizenship, race and ethnicity, parents’ names and Social Security numbers, phone number, address, and other personal information.”

Here’s what’s at risk.

What does this mean for your Social Security number?

The New York Times describes Numident as “one of the nation’s most sensitive repositories of personal information,” in its report on the case. [2]

While there is no evidence of a breach yet, the database is a prime target for hackers.

“Should bad actors gain access to this cloud environment, Americans may be susceptible to widespread identity theft, may lose vital healthcare and food benefits,” the complaint reads.

Read more: This is how much US drivers saved on car insurance when they switched providers, according to a new Consumer Reports survey of 140,000 policyholders

How did DOGE access this goldmine of SSA data?

Earlier this year, former DOGE head Elon Musk and President Donald Trump claimed that millions of dead Americans were still receiving Social Security payments — even though a 2024 SSA report found that less than 1% of the trillions of dollars paid out by the agency between 2015 and 2022 were “improper.”

Opponents fought DOGE in court to prevent the department gaining access to such sensitive information. But at Trump’s urging, the Supreme Court overruled lower courts that blocked DOGE’s access to sensitive SSA info, allowing the department to proceed.

What to do if you think your Social Security Number has been breached

Of course, the whistleblower revelation will have many Americans wondering what could happen if their Social Security numbers are hacked.

An identity thief can do any number of things with your Social Security Number, including apply for a new line of credit in your name, max it out and leave you with a battered credit rating. They can also file a tax return under your name and claim the refund.

It’s important to stay vigilant so that if your SSN is stolen, you can act quickly:

If your identity is stolen, the SSA recommends reporting it to IdentityTheft.gov online or at 1-877-IDTHEFT (TTY 1-866-653-4261). This service, run by the Federal Trade Commission, will help you through the process of recovering your identity.

As well, the SSA advises contacting the IRS online or at 1-800-908-4490 and filing a complaint with the Internet Crime Complaint Center.

What to read next

Join 200,000+ readers and get Moneywise’s best stories and exclusive interviews first — clear insights curated and delivered weekly. Subscribe now.

Article sources

At Moneywise, we consider it our responsibility to produce accurate and trustworthy content people can rely on to inform their financial decisions. We rely on vetted sources such as government data, financial records and expert interviews and highlight credible third-party reporting when appropriate.

We are committed to transparency and accountability, correcting errors openly and adhering to the best practices of the journalism industry. For more details, see our editorial ethics and guidelines.

[1]. Forbes "DOGE uploaded all Social Security numbers to risky clouse server, top SSA official says"

[2]. New York Times "DOGE put critical Social Security data at risk, whistle-blower says"

[3]. Allstate "What to do if someone has your Social Security number"

[4]. Identity Guard "Was your SSN found on the Dark Web? Do this"

This article provides information only and should not be construed as advice. It is provided without warranty of any kind.