> ## Content Index > Fetch the complete content index at: https://libertys-lens.ghost.io/llms.txt > Use this file to discover other available public pages before exploring further. # The DOGE That Ate SSA: Inside the Data Breach Waiting to Happen - URL: https://libertys-lens.ghost.io/the-doge-that-ate-ssa-inside-the/ - Published: 2025-09-01T13:03:28.000Z - Updated: 2026-08-13T16:52:16.000Z - Description: Trump’s Department of Government Efficiency put a Musk protégé with reported hacker ties in the chain of control over your Social Security data. Here’s why that’s a national security nightmare. - Author: Graham Baughman - Tags: Newsletter, #Migrated-1786639647847, #Import 2026-08-13 16:47 [Subscribe](#/portal/signup) ### A whistleblower walks out Charles Borges, the Social Security Administration’s Chief Data Officer, resigned “involuntarily” after blowing the whistle on a **live copy of America’s most sensitive data** being moved into an off‑book cloud environment steered by DOGE operatives—an environment he says **circumvented standard oversight** and put more than 300 million people at risk ([NBC News](https://www.nbcnews.com/politics/doge/social-security-whistleblower-submits-involuntary-resignation-citing-i-rcna228095?ref=libertys-lens.ghost.io) | [CBS News](https://www.cbsnews.com/news/social-security-admin-chief-data-officer-resigns-after-filing-whistleblower-complaint/?ref=libertys-lens.ghost.io)). In his protected disclosure, Borges details how DOGE personnel created a **shadow cloud repository** with privileged access that could expose Social Security numbers, bank routing details, and the very systems that control benefit payments—warning that a compromise could trigger **mass identity theft** and force the government to **reissue every Social Security number** ([Government Accountability Project PDF](https://whistleblower.org/wp-content/uploads/2025/08/08-26-2025-Borges-Disclosure-Sanitized.pdf?ref=libertys-lens.ghost.io)). SSA’s line is that the data is “walled off from the internet” and hasn’t been compromised—but “trust us” doesn’t cut it when the whistleblower says **internal controls were bypassed** and leadership shut down visibility ([CBS News](https://www.cbsnews.com/news/social-security-admin-chief-data-officer-resigns-after-filing-whistleblower-complaint/?ref=libertys-lens.ghost.io) | [NBC News](https://www.nbcnews.com/politics/doge/social-security-whistleblower-submits-involuntary-resignation-citing-i-rcna228095?ref=libertys-lens.ghost.io)). --- ## Who holds the keys? The rise of “Big Balls” The complaint—and subsequent reporting—trace an eyebrow‑raising arc for **Edward Coristine (“Big Balls”)**: Neuralink intern → DOGE “Senior Advisor” → **GS‑15 federal employee in May 2025** (one of the highest civil‑service pay grades) → DOGE resignation in June → **reappears at SSA days later** ([Wired](https://www.wired.com/story/big-balls-young-doge-converted-into-full-time-government-employees/?ref=libertys-lens.ghost.io) | [Wired](https://www.wired.com/story/big-balls-coristine-doge-resigned-us-government/?ref=libertys-lens.ghost.io)). Coristine has **no known criminal convictions**, but the record is replete with **hacker‑community ties and security incidents**: he was fired from Path Network after an alleged leak to a competitor ([Gizmodo](https://gizmodo.com/doge-staffer-previously-fired-from-cybersecurity-company-for-leaking-secrets-2000561131?ref=libertys-lens.ghost.io) | [Mediaite](https://www.mediaite.com/media/news/musk-doge-staffer-was-fired-for-allegedly-leaking-company-secrets/?ref=libertys-lens.ghost.io)), and his infrastructure company **DiamondCDN** supported **EGodly**, a cybercrime group that bragged about data theft and harassing an FBI agent ([Computerworld](https://www.computerworld.com/article/3854676/doge-staffer-allegedly-ran-company-providing-services-to-hacking-group.html?ref=libertys-lens.ghost.io)). Investigative reporting also links Coristine to **“The Com,”** a cluster of Discord/Telegram communities associated with cybercrime; a Telegram handle tied to him allegedly solicited a **DDoS‑for‑hire** in 2022 ([KrebsOnSecurity](https://krebsonsecurity.com/2025/02/teen-on-musks-doge-team-graduated-from-the-com/?ref=libertys-lens.ghost.io)). Add to that **Tesla.Sexy LLC**, which controls domains registered for the Russian market, a detail that—while not illegal—raises predictable **clearance and counter‑intel questions** given his placement near federal data spines ([Wired](https://www.wired.com/story/edward-coristine-tesla-sexy-path-networks-doge/?ref=libertys-lens.ghost.io)). --- ## The DOGE bench now embedded at SSA Borges names **Aram Moghaddassi**—a former Neuralink/X technologist who worked with DOGE—as a central figure. He served on DOGE projects, then **landed as SSA’s CIO in June/July 2025**, after an interim rotation of DOGE‑aligned IT leaders ([DevX](https://www.devx.com/daily-news/ssa-appoints-aram-moghaddassi-as-cio/?ref=libertys-lens.ghost.io) | [Nextgov](https://www.nextgov.com/people/2025/03/ssa-tech-shop-beled-another-doge-associate/404031/?ref=libertys-lens.ghost.io)). Reporting shows DOGE actors, including Moghaddassi and Coristine, were previously given **broad access to USCIS systems**, including a cloud “data lake” and enabling tools like GitHub ([FedScoop](https://fedscoop.com/doge-granted-access-tonaturalization-immigration-it-systems/?ref=libertys-lens.ghost.io)). The Supreme Court’s emergency order in June **green‑lit expanded DOGE access** to SSA systems, despite union privacy challenges—setting the stage for the very off‑platform handling Borges describes ([The Hill](https://thehill.com/regulation/court-battles/5337658-supreme-court-doge-social-security-records/?ref=libertys-lens.ghost.io)). [Subscribe now](#/portal/signup) --- ## Not just theoretical risk: there’s already a misuse case This isn’t merely a “what if.” Earlier this year, SSA data was reportedly **weaponized to target immigrants**—with **thousands of migrants flagged as “dead”** to prompt “self‑deportation,” according to contemporaneous reporting, and with **minors included on a high‑risk list** sent to SSA leadership, calling the underlying data hygiene and claims into question ([New York Times](https://www.nytimes.com/2025/04/10/us/politics/migrants-deport-social-security-doge.html?ref=libertys-lens.ghost.io) | [New York Times](https://www.nytimes.com/2025/06/16/us/politics/doge-social-security.html?ref=libertys-lens.ghost.io)). Pair that track record with Borges’s allegation of a **live copy of the Numident** (the backbone record of every SSN) moved into a **DOGE‑controlled cloud enclave** with **weak auditability**, and the risk calculus is plain: a **single point of catastrophic failure** ([Government Accountability Project PDF](https://whistleblower.org/wp-content/uploads/2025/08/08-26-2025-Borges-Disclosure-Sanitized.pdf?ref=libertys-lens.ghost.io)). --- ## What happens if that enclave is abused or breached If a misconfiguration, insider misuse, or intrusion occurs, attackers (or rogue operators) could **change direct‑deposit instructions, freeze benefits, or drain linked accounts** before agencies even recognize what happened. At scale, you could trigger **mass identity theft** and the logistical nightmare of re‑issuing identifiers to an entire nation ([Government Accountability Project PDF](https://whistleblower.org/wp-content/uploads/2025/08/08-26-2025-Borges-Disclosure-Sanitized.pdf?ref=libertys-lens.ghost.io) | [CBS News](https://www.cbsnews.com/news/social-security-admin-chief-data-officer-resigns-after-filing-whistleblower-complaint/?ref=libertys-lens.ghost.io)). SSA says the data is “walled off,” but the complaint says **oversight was sidelined** and requests for visibility were **ignored or rebuffed**—including reports of staff being told **not to answer** the CDO’s queries ([NBC News](https://www.nbcnews.com/politics/doge/social-security-whistleblower-submits-involuntary-resignation-citing-i-rcna228095?ref=libertys-lens.ghost.io) | [The Handbasket](https://www.thehandbasket.co/p/charles-borges-ssa-chief-data-officer-whistleblower-resigns-email?ref=libertys-lens.ghost.io)). --- ## From CDC to SSA: the pattern is governance collapse This is part of a broader story: **institutional hollowing**. The **CDC director, Susan Monarez**, was pushed out weeks into the job, followed by senior resignations over vaccine policy and the “weaponization of public health” ([STAT](https://www.statnews.com/2025/08/27/cdc-director-susan-monarez-ousted/?ref=libertys-lens.ghost.io) | [POLITICO](https://www.politico.com/news/2025/08/27/hhs-monarez-no-longer-director-of-cdc-00532488?ref=libertys-lens.ghost.io)). Public health leaders described **chaotic directives and retaliatory culture** ([The Guardian](https://www.theguardian.com/us-news/2025/aug/27/cdc-director-susan-monarez-ousted?ref=libertys-lens.ghost.io) | [Advocate](https://www.advocate.com/news/demetre-daskalakis-blistering-resignation?ref=libertys-lens.ghost.io)). Now that same blend of **political speed, improvised authority, and disdain for guardrails** is being applied to the **Social Security data spine**, which underwrites Americans’ **identity, benefits, and financial security**. --- ## What needs to happen now The public doesn’t need platitudes about “efficiency.” We need **verifiable controls**. - **Extract and quarantine:** Remove any **live copy of SSA production data** from unaccredited environments; store only in accredited enclaves with FISMA‑aligned controls and validated **A&A**. - **Re‑establish chain of command:** Restore standard **segregation of duties**, **least‑privilege access**, and **independent logging** under agency authority; immediately revoke unfettered access for non‑cleared, non‑agency personnel. - **Independent technical audit:** Commission a **NIST‑aligned** red/blue‑team assessment and configuration review, reporting directly to **IG/GAO** and relevant Hill committees. - **Congressional guardrails:** Codify limits on third‑party access to **systems of record** and **PII data lakes**, and require **public inventorying** of any copy operations involving SSN‑bearing datasets. Anything less leaves **300+ million Americans** a misstep away from chaos. --- ## For readers who want the receipts - Borges’s protected disclosure — ([Government Accountability Project PDF](https://whistleblower.org/wp-content/uploads/2025/08/08-26-2025-Borges-Disclosure-Sanitized.pdf?ref=libertys-lens.ghost.io)) - Borges’s resignation and SSA’s response — ([NBC News](https://www.nbcnews.com/politics/doge/social-security-whistleblower-submits-involuntary-resignation-citing-i-rcna228095?ref=libertys-lens.ghost.io) | [CBS News](https://www.cbsnews.com/news/social-security-admin-chief-data-officer-resigns-after-filing-whistleblower-complaint/?ref=libertys-lens.ghost.io)) - Borges resignation email and internal culture claims — ([The Handbasket](https://www.thehandbasket.co/p/charles-borges-ssa-chief-data-officer-whistleblower-resigns-email?ref=libertys-lens.ghost.io)) - DOGE access context; Supreme Court’s June action — ([The Hill](https://thehill.com/regulation/court-battles/5337658-supreme-court-doge-social-security-records/?ref=libertys-lens.ghost.io)) - “Big Balls” goes federal — ([Wired](https://www.wired.com/story/big-balls-young-doge-converted-into-full-time-government-employees/?ref=libertys-lens.ghost.io) | [Wired](https://www.wired.com/story/big-balls-coristine-doge-resigned-us-government/?ref=libertys-lens.ghost.io)) - Coristine’s hacker‑community footprint — ([KrebsOnSecurity](https://krebsonsecurity.com/2025/02/teen-on-musks-dogeteam-graduated-from-the-com/?ref=libertys-lens.ghost.io) | [Computerworld](https://www.computerworld.com/article/3854676/doge-staffer-allegedly-ran-company-providing-services-to-hacking-group.html?ref=libertys-lens.ghost.io)) - Prior termination tied to alleged leaks — ([Gizmodo](https://gizmodo.com/doge-staffer-previously-fired-from-cybersecurity-company-for-leaking-secrets-2000561131?ref=libertys-lens.ghost.io) | [Mediaite](https://www.mediaite.com/media/news/musk-doge-staffer-was-fired-for-allegedly-leaking-company-secrets/?ref=libertys-lens.ghost.io)) - Tesla.Sexy LLC and Russian domains — ([Wired](https://www.wired.com/story/edward-coristine-tesla-sexy-path-networks-doge/?ref=libertys-lens.ghost.io)) - DOGE/SSA data misuse precedent — ([New York Times](https://www.nytimes.com/2025/04/10/us/politics/migrants-deport-social-security-doge.html?ref=libertys-lens.ghost.io) | [New York Times](https://www.nytimes.com/2025/06/16/us/politics/doge-social-security.html?ref=libertys-lens.ghost.io)) - USCIS/immigration system access — ([FedScoop](https://fedscoop.com/doge-granted-access-tonaturalization-immigration-it-systems/?ref=libertys-lens.ghost.io)) - SSA leadership churn — ([DevX](https://www.devx.com/daily-news/ssa-appoints-aram-moghaddassi-as-cio/?ref=libertys-lens.ghost.io) | [Nextgov](https://www.nextgov.com/people/2025/03/ssa-tech-shop-beled-another-doge-associate/404031/?ref=libertys-lens.ghost.io)) - CDC collapse context — ([STAT](https://www.statnews.com/2025/08/27/cdc-director-susan-monarez-ousted/?ref=libertys-lens.ghost.io) | [POLITICO](https://www.politico.com/news/2025/08/27/hhs-monarez-no-longer-director-of-cdc-00532488?ref=libertys-lens.ghost.io) | [The Guardian](https://www.theguardian.com/us-news/2025/aug/27/cdc-director-susan-monarez-ousted?ref=libertys-lens.ghost.io) | [Advocate](https://www.advocate.com/news/demetre-daskalakis-blistering-resignation?ref=libertys-lens.ghost.io)) Thanks for reading! This post is public so feel free to share it. [Leave a comment](#ghost-comments-root)