Court filing: DOGE aide broke Treasury policy by emailing unencrypted database
theregister.com
theregister.com
This damage won't be fixed within the lifetime of anyone alive today.
We won't even see WW3 coming, just tiny footsteps and then BOOM some morning.
You may not "want" that. However, given the lack of consumer privacy laws in the US, anybody willing to pay can buy it from a data broker[1].
[1] https://www.experian.com/small-business/target-prospects
[Edit] Based on replies specific query results of two people names and dollar amounts into a spreadsheet. Poorly worded title on El Reg's part. Still a security privacy and compliance incident.
> 12. The forensic analysis also revealed that Elez sent an email with a spreadsheet containing PII to two United States General Services Administration officials. The PII detailed a name (aperson or an entity), a transaction type, and an amount of money. The names in the spreadsheet are considered low risk PII because the names are not accompanied by more specific identifiers, such as social security numbers or birth dates. Elez’s distribution of this spreadsheet was contrary to BFS policies, in that it was not sent encrypted, and he did not obtain prior approval of the transmission via a “Form 7005,” describing what will be sent and what safeguards the sender will implement to protect the information.
12. The forensic analysis also revealed that Elez sent an email with a
spreadsheet containing PII to two United States General Services Administration
officials. The PII detailed a name, a transaction type, and an amount of money.Previous background on Ryan Wunderly and Marko Elez: https://www.politico.com/news/2025/02/20/treasury-irs-data-w...
"Treasury said Ryan Wunderly will replace Marko Elez on the agency’s DOGE team. Elez examined the federal payments system housed at the Bureau of the Fiscal Service before he resigned from Treasury earlier this month after The Wall Street Journal surfaced racist social media posts."
>The forensic analysis also revealed that Elez sent an email with a spreadsheet containing PII >to two United States General Services Administration officials.
https://storage.courtlistener.com/recap/gov.uscourts.nysd.63...
The word "database" never appears in the filing, that's The Register's word choice.
You can store A LOT in that format in 16MB.
So; not a paddlin’.
They're quite capable of doing both of these at the same time.
$ RCPT="dogehouse@doge.gov" database_dump_command | split -b max_bytes M --filter="gzip -| base64 | mail -s \$FILE \$RCPT"
Next time they might want to replace | base64 | with | gpg -r dogehouse@doge.gov -e -a |' which would turn the unencrypted export into an encrypted version: $ RCPT="dogehouse@doge.gov" database_dump_command | split -b max_bytes M --filter="gzip -| gpg -r \$RCPT -e -a | mail -s \$FILE \$RCPT"