DOGE Unauthorized Access to Treasury, OPM, and Social Security Databases

DOGE accessed Treasury, OPM, and SSA databases containing millions of Americans' personal data without authorization or completed background checks. Federal judges ordered data disgorged and deleted, finding Privacy Act and APA violations, though the Supreme Court later partially reversed.

Elon Musk's Department of Government Efficiency (DOGE) gained access to Treasury payment systems, OPM personnel records, and Social Security Administration databases containing Americans' personal data — including Social Security numbers, bank accounts, and tax information — without proper authorization, background checks, or legal basis. Multiple federal judges blocked access and ordered data deletion, but the Supreme Court ultimately allowed access to SSA data. A whistleblower revealed DOGE shared personal data with DHS and consulted with a political advocacy group about matching SSA data with voter rolls.

Executive summary

What this record documents

  • DOGE staff were granted access to Treasury's central payment system (handling trillions in tax refunds, Social Security benefits, and veterans' benefits), OPM personnel databases, and SSA systems containing Americans' most sensitive personal data.
  • A federal judge found DOGE staffers were given access before background checks were completed or inter-agency detail agreements were finalized, violating the Privacy Act and Administrative Procedure Act.
  • A court ordered DOGE to disgorge and delete all non-anonymized personal information obtained from SSA systems — the first 'disgorge' order of its kind against a federal entity.
  • A DOGE team member sent an encrypted file containing names and addresses of approximately 1,000 people to DHS, and two DOGE employees were referred to a federal watchdog for potentially violating the Hatch Act by consulting with a political advocacy group about matching SSA data with voter rolls.
  • The Supreme Court ultimately allowed DOGE access to SSA data over dissents from all three liberal justices, partially reversing lower court protections.

Timeline

Sequence of events

  1. DOGE gains access to Treasury payment systems

    Elon Musk's DOGE team is granted access to the Treasury Department's central payment system, which handles trillions of dollars in payments and contains Social Security numbers and bank account information for millions of Americans.

  2. Federal judge blocks DOGE access to Treasury

    US District Judge Paul Engelmayer issues a preliminary injunction blocking DOGE from accessing Treasury Department records, after 19 Democratic attorneys general sued. New York Attorney General Letitia James leads the case.

  3. DOGE member sends personal data to DHS

    A DOGE team member sends an encrypted file with names and addresses of approximately 1,000 people to the Department of Homeland Security, copying DOGE adviser Steve Davis and a DOGE Department of Labor employee.

  4. Federal judge bars DOGE access to SSA, OPM, and Treasury data

    A federal judge bars DOGE from accessing sensitive personal information at three federal agencies, finding that several DOGE staffers were granted access before background checks were completed.

  5. Court orders DOGE to disgorge and delete SSA data

    In an unprecedented order, a federal court requires all DOGE team members to disgorge and delete all non-anonymized personal information obtained from SSA systems.

  6. Supreme Court allows DOGE access to SSA data

    The Supreme Court grants the Trump administration's emergency application, lifting the injunction blocking DOGE access to Social Security data. All three liberal justices dissent.

Analysis

Reporting, legal context, and impact

What Happened

Beginning in late January 2025, employees of the Department of Government Efficiency (DOGE) — a body led by Elon Musk — gained access to some of the most sensitive databases in the federal government without proper authorization, completed background checks, or clear legal basis. The databases accessed contained the personal information of millions of Americans.

Treasury Department

DOGE was granted access to the Treasury Department's central payment system, which processes trillions of dollars in payments annually including tax refunds, Social Security benefits, veterans' benefits, and federal salaries. The system contains an expansive network of Americans' Social Security numbers, bank account information, and financial data.

Nineteen Democratic attorneys general, led by New York AG Letitia James, sued the Trump administration alleging the access violated federal law. On February 8, 2025, US District Judge Paul Engelmayer issued a preliminary injunction blocking DOGE access.

Office of Personnel Management

DOGE employees accessed OPM databases containing federal personnel records — employment histories, performance reviews, personal information, and security clearance data for millions of current and former federal workers. A federal judge found that DOGE staffers were granted access before their background checks were completed.

Social Security Administration

DOGE gained access to SSA systems containing the records of virtually every American — Social Security numbers, earnings histories, disability determinations, and benefit information. A federal court issued an unprecedented order requiring DOGE to "disgorge and delete" all non-anonymized personal information obtained from SSA systems.

However, the Supreme Court in June 2025 granted the Trump administration's emergency application to lift the injunction, allowing DOGE access to SSA data. All three liberal justices dissented.

Data Mishandling and Political Use

The access was not merely passive. Court filings revealed:

  • On March 3, 2025, a DOGE team member sent an "encrypted and password-protected file" containing the names and addresses of approximately 1,000 people to the Department of Homeland Security, copying DOGE adviser Steve Davis.
  • Two SSA DOGE employees were referred to a federal watchdog for potential Hatch Act violations after they secretly consulted with a political advocacy group about matching Social Security data with state voter rolls to "find evidence of voter fraud and to overturn election results in certain States."

Legal Analysis

Privacy Act Violations

The Privacy Act restricts federal agencies from disclosing personal records without the individual's consent and requires that agencies maintain security sufficient to prevent unauthorized access. Multiple federal judges found that DOGE's access violated the Privacy Act — staffers were given access before background checks were complete, without proper inter-agency agreements, and without the training required to handle personally identifiable information.

Administrative Procedure Act

The courts also found APA violations. The government failed to follow the required procedures for granting access to sensitive systems, including completing background checks and establishing formal detail agreements.

Political Weaponization of Data

The referral of two DOGE employees for potential Hatch Act violations over their consultation with a political advocacy group about voter roll matching represents the most alarming dimension: the potential political weaponization of Americans' most sensitive personal data.

Why This Is Classified Severe

  • Scale: Access to databases containing the personal information of virtually every American — SSA records, tax data, bank accounts, personnel files.
  • Unauthorized access: Multiple federal judges found the access violated federal privacy laws and procedures.
  • Data sharing: A DOGE employee shared personal data of 1,000 people with DHS without authorization.
  • Political weaponization: DOGE employees consulted with political groups about using SSA data for voter roll matching.
  • Judicial defiance pattern: The Supreme Court's intervention to override lower court protections follows a pattern of the administration pushing past legal guardrails.
  • Precedent: If a private citizen's entity can access all federal databases without proper authorization, the foundational privacy protections of government data are meaningless.

International Law Violations

  1. ICCPR Article 17: Prohibition on arbitrary or unlawful interference with privacy. Mass unauthorized access to personal records without legal basis constitutes arbitrary interference.
  2. UDHR Article 12: Protection against arbitrary interference with privacy and the right to legal protection against such interference.

Source documents

Primary records

Linked reporting

Reporting and secondary sources

Related records

Read this record in context