Overview
- Commissioner Frank Bisignano told Senate Finance Chair Mike Crapo that the agency found no evidence the Numident database was accessed, leaked, hacked, or shared without authorization.
- SSA says an August review interviewed former chief data officer Charles Borges and determined the records were on a secured, continuously monitored SSA Amazon Web Services server.
- The agency emphasized compliance with federal security standards, 24/7 monitoring and risk assessments, role-based permissions, and oversight by more than 300 cybersecurity professionals.
- Borges’ whistleblower filing, submitted through the Government Accountability Project, alleges officials tied to the Department of Government Efficiency created a live copy in a cloud environment with weak controls; he resigned after saying his warnings were ignored.
- DOGE was created by executive order in January, a district court restricted its access to SSA systems in March, and the Supreme Court lifted that restriction in June as legal and congressional scrutiny continues.