What DOGE and its affiliates are doing with government systems and data [pdf]

Gemini 2.5 summary and highlights:

[cite_start]This report, based on the expert testimony of cybersecurity specialist Bruce Schneier and supplementary documents, outlines the significant cybersecurity risks created by the Department of Government Efficiency (DOGE). [cite: 1, 2, 3, 4] [cite_start]The central argument is that DOGE's approach to data management has dangerously weakened the U.S. government's security posture, creating unprecedented threats to national security and individual privacy. [cite: 4, 119]

### Key Findings:

*DOGE's Approach to Data:* * [cite_start]*Data Consolidation:* DOGE has been exfiltrating and connecting vast government databases to create a single, comprehensive pool of data on all people in the United States. [cite: 25, 27] [cite_start]This includes highly sensitive information such as tax returns, health records, social security numbers, and military service records. [cite: 21, 27, 138, 139, 140, 144] * [cite_start]*Reduced Security:* The program has consistently bypassed and disabled critical security measures. [cite: 4] [cite_start]This includes removing access controls, failing to vet staff with the required background checks, and creating unmonitored copies of data. [cite: 28, 29, 76] * [cite_start]*Use of AI:* DOGE is processing the consolidated data with AI tools, which exposes sensitive information outside of securely monitored environments and is being used to train AI models. [cite: 30, 191, 194] * [cite_start]*Outsourcing:* Control over data access is being transferred to private companies, notably Palantir, which has been reported to be working on projects without signed contracts outlining security measures. [cite: 31, 33, 34]

*Major Cybersecurity Risks:* * [cite_start]*Attractive Target for Adversaries:* The consolidation of disparate data streams has created a massive and highly attractive target for foreign and domestic adversaries. [cite: 4, 69] [cite_start]There is evidence of near real-time login attempts by users with Russian IP addresses using correct DOGE staff credentials. [cite: 39, 40] * [cite_start]*Coercion and Blackmail:* The accessible data can be used to blackmail, threaten, or harass individuals, including public officials and their families. [cite: 43, 46, 48] [cite_start]This can be achieved by weaponizing seemingly innocuous data like home addresses or more sensitive information related to health or finances. [cite: 47, 49] * [cite_start]*Cyberwarfare Preparation:* Adversaries can use the data to prepare for future conflicts by identifying vulnerabilities and targeting critical infrastructure or key individuals. [cite: 59, 62] [cite_start]The security breaches could allow for the installation of backdoors in crucial systems like the Treasury Payments System. [cite: 65] * [cite_start]*System Manipulation and Control:* The lax security practices create risks of data exposure, system manipulation, and complete system control by external actors. [cite: 230, 232, 235] [cite_start]This could lead to the alteration of records, denial of essential services, and the installation of ransomware. [cite: 248, 252, 254]

*Specific Examples and Consequences:* * [cite_start]DOGE personnel gained extensive "read" and sometimes "edit" access to critical systems at the Treasury Department, the Consumer Financial Protection Bureau, the Center for Medicare and Medicaid Services, and Veterans Affairs, among others. [cite: 17, 18, 20, 21, 22] * [cite_start]The 2015 hack of the Office of Personnel Management (OPM) by China, which was considered a massive security threat, pales in comparison to the potential data exposure from the combined DOGE datasets. [cite: 71, 73] * [cite_start]The lack of proper security protocols means that auditing what data has been copied and by whom is nearly impossible. [cite: 93] [cite_start]The report warns that government data on U.S. citizens could gradually appear on dark networks for years to come. [cite: 94] * [cite_start]Errors in the consolidated data, whether accidental or deliberately introduced by adversaries, could propagate through the system, leading to incorrect denial of benefits or the targeting of individuals for fraud. [cite: 102, 104, 106]

*Recommendations:* [cite_start]To mitigate these risks, the report recommends immediate action, including revoking DOGE's access, conducting a full forensic analysis of the systems, treating all affected systems as potentially compromised, rebuilding critical systems, and conducting an independent security assessment. [cite: 346, 349, 350, 351, 352] [cite_start]The report stresses that continued access exacerbates the damage, making recovery more difficult and increasing the risk of irreversible harm. [cite: 96, 353]