Your Social Security Data May Not Be Secured. What You Should Know

A complaint made by a Social Security Administration whistleblower last week has caused some Americans to worry about the safety of their personal information.

The whistleblower, SSA’s chief data officer Charles Borges, said the Department of Government Efficiency uploaded a Social Security database full of sensitive information—Social Security numbers, applicant names, places and dates of birth, among other data—to an unsecured cloud server in June.

The Government Accountability Project, a whistleblower protection group, filed the complaint that was first reported by The New York Times. Borges’s lawyers said the information is on a server that only DOGE employees can access. The server lacks security oversight or a way to track who accessed it, he said.

Why Does This Matter to You?

While the whistleblower’s information is concerning, it shouldn’t immediately raise alarm bells for those with Social Security cards or receiving benefits, said Jim Komoroski, registered Social Security analyst and principal of the M1 insurance agency.

If data is not secured, a data breach could compromise the information of the 300 million people who have Social Security cards. However, that is only a possibility.

“It’s important to note there’s currently no evidence of a breach,” Komoroski said.

Komoroski also said the issue is how the data was stored and does not affect benefits, so current recipients won’t see an impact on their checks or eligibility. 

What Should You Do to Secure Your Social Security Information?

While experts say situations like this one are mostly out of your hands, there are steps you can take to ensure your data is as secure as possible.

Komoroski recommends all beneficiaries create and use a my Social Security account. This secure online portal hosted by the SSA allows individuals to access their statements, manage benefits, and check their applications.

He also recommends enabling two-factor authentication for added security and monitoring your credit report for suspicious activity or inaccuracies.

“For Americans whose data was shared, the main risk is identity theft,” Komoroski said. “A compromised Social Security number can be misused for credit applications or medical fraud.” 

Some warning signs of identity theft include bills for items you didn’t purchase and debt collection calls for accounts you did not open.

If you believe your identity has been stolen due to compromised data, contact the Federal Trade Commission, the fraud department at your credit card issuer or bank, and credit reporting agencies. They can place fraud alerts and credit freezes on your accounts to prohibit further damage.

“Vigilance is key right now,” Komoroski said.