Loading story…
Court filings in ongoing litigation over the Department of Government Efficiency (DOGE) access to Social Security Administration (SSA) data describe a March 2025 outreach from a political advocacy group seeking help analyzing state voter rolls it had obtained, with the stated goal of finding voter fraud and overturning election results in certain states. According to a Justice Department correction signed by civil division official Elizabeth Shapiro, two DOGE associates at SSA were contacted, and one signed and sent a “Voter Data Agreement” that was not processed through SSA’s normal data-exchange approval procedures; SSA later discovered the agreement during an unrelated internal review.
The filings say SSA has not seen evidence that SSA data were actually shared with the advocacy group, but communications suggest DOGE team members could have been asked to access SSA data to match against voter rolls, potentially involving Social Security numbers and use of unapproved third-party infrastructure. SSA made referrals to the Office of Special Counsel for potential Hatch Act violations tied to the alleged political activity, while the broader dispute over DOGE’s access to SSA data continues and has prompted corrections to prior SSA testimony in court.
See the reporting duties and controls this puts on the clock.
6 events from the most recent confirmed update back to the earliest known activity.
On 2026-04-10, the U.S. Court of Appeals for the Fourth Circuit vacated the lower court order that had restricted DOGE access to sensitive SSA systems, ruling plaintiffs had not shown likely irreparable harm on the record before the district court. The appellate decision acknowledged later revelations about possible improper data access as alarming and sent the case back for further proceedings.
On 2026-01-20, court-filed corrections to earlier testimony by senior SSA officials disclosed that two DOGE members may have improperly accessed and potentially shared sensitive SSA data in connection with the advocacy group's election-related project. The filing also described an encrypted file believed derived from SSA records being emailed externally and raised concerns about data handling on third-party infrastructure.
After reviewing the conduct, the Social Security Administration made two Hatch Act referrals involving DOGE officials connected to the voter-roll analysis effort and the unapproved data-sharing agreement. The referrals were based on concerns that SSA data may have been used for political activity.
At a later point in the litigation over DOGE's SSA access, a federal judge issued a temporary restraining order blocking DOGE members from accessing SSA systems containing Social Security numbers, medical records, tax information, driver's license numbers, and other sensitive personal data. Subsequent filings alleged DOGE associates may still have retained or accessed sensitive data after that order.
Around March 2025, DOGE personnel at SSA were alleged to have accessed sensitive SSA data, potentially matched it against voter rolls, and used unapproved third-party infrastructure such as Cloudflare links and external servers to share or process data. SSA later said it could not determine what data may have been shared or whether any remained on third-party systems.
On 2025-03-24, a DOGE employee embedded at the Social Security Administration reportedly signed and sent a "Voter Data Agreement" tied to a political advocacy group's request to analyze acquired state voter rolls for evidence of voter fraud. Court filings say the effort was aimed at supporting attempts to overturn election results in certain states.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
See what this changes for your reporting obligations and which controls it puts on the clock.
4 references tracked. Mallory keeps watching after this page renders.
nextgov.com
Open sourcescworld.com
Open sourcenextgov.com
Open sourcetechcrunch.com
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Federal actions tied to election integrity and voter-fraud narratives triggered sharp backlash and oversight concerns. In Georgia, federal officials raided Fulton County’s Elections Office and seized roughly **700 boxes** of 2020-election records, including physical ballots, prompting state and local election officials to warn about ballot chain-of-custody risks and the precedent such a raid could set ahead of the **2026 midterms**. Lawmakers also criticized the administration for pursuing what they described as baseless online conspiracy theories, while the administration described plans to repurpose the federal **SAVE** database—historically used for tracking immigrant benefits—into a voter citizenship verification tool. Separately, bipartisan leaders of the Senate Finance Committee demanded details from the **Social Security Administration (SSA)** after a court filing indicated the agency does not know the full extent of SSA data accessed and shared by the Department of Government Efficiency (**DOGE**). The filing alleged DOGE associates **circumvented SSA data-sharing procedures**, used **unauthorized third-party servers** to share data, and that SSA still cannot determine what data was shared or whether it remains on those servers; it also described an agreement to share SSA data with an unnamed political advocacy group seeking evidence of voter fraud and to overturn results in certain states. SSA reportedly made **Hatch Act referrals** related to the incident and acknowledged learning key details only during a later, unrelated review.
Jun 29, 2026
A whistleblower complaint alleges a former employee associated with Elon Musk’s **Department of Government Efficiency (DOGE)** improperly accessed and removed highly sensitive U.S. Social Security Administration (SSA) data, storing it on a thumb drive and later claiming he brought the data to a new job. Reporting indicates the individual told colleagues at a government contractor that he possessed two tightly restricted SSA datasets—**Numident** and the **Master Death File**—and planned to use or share the information at his new employer; the datasets reportedly contain large-scale personally identifiable information (PII) such as Social Security numbers and birth details. The SSA’s **Office of Inspector General** is investigating the allegations and has reportedly notified members of Congress, according to correspondence reviewed by *The Washington Post* and sources familiar with the matter. The reporting frames the alleged conduct as a potentially unprecedented breach of SSA security protocols and notes it follows earlier concerns and legal claims about DOGE-linked access to restricted Social Security data and handling of large volumes of SSA records.
Jun 29, 2026
The Department of Government Efficiency (DOGE), a federal agency reportedly created by Elon Musk, has come under intense scrutiny for its handling of sensitive personal data belonging to millions of Americans. According to a report by the Senate Homeland Security and Government Affairs Committee Democrats, DOGE has been bypassing established cybersecurity protections at three major federal agencies: the Social Security Administration (SSA), the General Services Administration (GSA), and the Office of Personnel Management (OPM). The committee's findings are based on staff visits, whistleblower disclosures, legal filings, and media reports, all of which point to significant lapses in data security and privacy compliance by DOGE personnel. One particularly alarming incident involved DOGE uploading the Numident database—a file containing highly sensitive personal information—into an environment lacking additional safeguards, which an internal SSA risk review estimated carried a 35% to 65% chance of a data breach with catastrophic consequences. Whistleblowers further alleged that DOGE staff, including Edward Coristine, had the ability to move sensitive SSA data into unmonitored cloud environments, raising the risk of unauthorized access or exfiltration. The Senate report also highlighted that DOGE teams were sometimes denied access to agency offices due to security concerns, and that DOGE personnel had not completed the same cybersecurity training required of other federal employees. In response to these findings, the committee urged federal agencies to revoke DOGE's access to sensitive information until the department demonstrates compliance with privacy laws and cybersecurity best practices. The report has sparked widespread concern about the potential for large-scale data breaches and the misuse of Americans' personal information. The situation is further complicated by the broader context of increasing government surveillance and the aggregation of disparate data streams, as noted by security experts. The risks posed by DOGE's practices are seen as distinct from those of corporate surveillance, with the potential for government misuse of personal data being particularly acute in a techno-authoritarian environment. The revelations have prompted calls for greater oversight, transparency, and accountability in how federal agencies and their contractors handle sensitive data. Lawmakers and privacy advocates are demanding immediate action to mitigate the risks and prevent future incidents. The controversy underscores the critical importance of robust cybersecurity protocols and strict adherence to privacy regulations in all government operations involving personal data. The ongoing investigation and public debate are likely to shape future policy and enforcement actions regarding federal data security. The case also serves as a cautionary tale for other agencies and private sector partners about the dangers of circumventing established cybersecurity safeguards. As the story develops, the focus remains on ensuring that Americans' personal information is protected from both internal and external threats. The incident has also reignited discussions about the balance between efficiency, innovation, and security in government technology initiatives. Ultimately, the DOGE controversy highlights the urgent need for comprehensive reforms to safeguard the privacy and security of citizens' data in the digital age.
Jun 29, 2026