The Committee has also received reports about troubling, fumbling efforts by DOGE to combine sensitive information held by SSA, the IRS, HHS, and other agencies into a single cross-agency master database. Improving how federal agencies share data to improve outcomes and customer service is a longstanding and bipartisan goal in Congress. Information obtained by the Committee, however, indicates that DOGE is carrying out its work in a manner that disregards important cybersecurity and privacy considerations, potentially in violation of the law.
In an apparent attempt to sidestep network security controls, the Committee has learned that DOGE engineers have tried to create specialized computers for themselves that simultaneously give full access to networks and databases across different agencies. Such a system would pose unprecedented operational security risks and undermine the zero-trust cybersecurity architecture that prevents a breach at one agency from spreading across the government. Information obtained by the Committee also indicates that individuals associated with DOGE have assembled backpacks full of laptops, each with access to different agency systems, that DOGE staff is using to combine databases that are currently maintained separately by multiple federal agencies.
.jpeg "NCA arrests four in connection with M&S, Co-op and Harrods cyberattacks")
