DOGE Has Your Social Security Data

Here's what you can actually do about it.

Close-up of a digital padlock on a dark background with blue lighting

TL;DR: A whistleblower alleges a former DOGE engineer walked out with 548 million Social Security records on a thumb drive. Whether or not that's true, the SSA's data has been compromised multiple times in the past year. Don't wait for confirmation. Lock down your identity now with these four free tools: credit freeze at all three bureaus, IRS Identity Protection PIN, E-Verify Self Lock, and SSA account monitoring. Total time: about 30 minutes.

Your Data Is Already Out There

Let's be clear about what we know:

  • March 2026: Whistleblower alleges DOGE engineer copied Numident database (548M records) to personal thumb drive, retained "God-level" access after leaving[1]
  • August 2025: SSA Chief Data Officer Charles Borges filed disclosure alleging 300M+ Americans' data uploaded to unsupervised cloud servers[2]
  • January 2026: Trump administration admitted in court DOGE accessed SSA data without authorization, four days after a judge ordered them to stop[3]

The SSA itself disputes some allegations. The former DOGE employee denies the claims. None of that matters for your protection strategy.

What matters: Multiple whistleblowers across multiple agencies have raised alarms about DOGE's data handling. The Inspector General is investigating. Congress is demanding answers.

Don't wait for the investigation to finish. Assume your Social Security number is compromised and act accordingly.

The Four Layers of Protection

Identity protection works best in layers. Each tool blocks a different type of fraud:

Protection What It Blocks Time to Set Up Cost
Credit Freeze New credit cards, loans, mortgages opened in your name 10-15 minutes Free
IRS IP PIN Fraudulent tax returns filed with your SSN 5-10 minutes Free
E-Verify Self Lock Someone using your SSN for employment verification 10-15 minutes Free
SSA Account Monitoring Changes to your benefits, address, direct deposit 5-10 minutes Free

All four are free. None hurt your credit score. Most can be temporarily lifted when you need them.

Layer 1: Credit Freeze (Most Important)

A credit freeze prevents creditors from accessing your credit report. No access, no new accounts opened in your name.[4]

You must freeze at all three bureaus separately. Here's how:

Equifax

Experian

TransUnion

When you need credit: You can temporarily "thaw" your freeze for a specific creditor or time period. Most bureaus let you do this online in minutes.

Layer 2: IRS Identity Protection PIN

An IP PIN is a six-digit number that must be included on your tax return. Without it, the IRS rejects the filing. Even if someone has your SSN, they can't file a fraudulent return without your PIN.[5]

How to Get Your IP PIN

  1. Go to irs.gov/identity-theft-fraud-scams/get-an-identity-protection-pin
  2. Click "Get an IP PIN"
  3. Sign in or create an IRS Online Account (uses ID.me for verification)
  4. Once verified, your IP PIN appears immediately

Important:

  • IP PINs are issued annually, and you'll get a new one each year starting in January
  • Your 2026 IP PIN is already available
  • Save your PIN somewhere secure, you'll need it for tax filing
  • If you can't verify online, use Form 15227 or visit a Taxpayer Assistance Center in person

Layer 3: E-Verify Self Lock

When you get hired, your employer uses E-Verify to confirm you're authorized to work. If someone else uses your SSN for a job, E-Verify would normally clear them. Self Lock stops that.[6]

How to Enable Self Lock

  1. Go to myeverify.uscis.gov
  2. Click "Create Account" and enter your email
  3. Verify via email link, then create a password
  4. Set up two-factor authentication (required)
  5. Set up five security questions
  6. Enter your name, date of birth, SSN, address, and phone number
  7. Complete the identity proofing quiz
  8. Go to "Manage My SSN" → "Lock My SSN"
  9. Answer three challenge questions

Important:

  • Self Lock lasts one year, you'll need to renew
  • You'll get a reminder 30 days before expiration
  • You can unlock anytime if you're actually starting a new job
  • This is completely separate from SSA: it only affects employment verification

Layer 4: SSA Account Monitoring

Creating a my Social Security account does two things: lets you monitor for fraud, and prevents criminals from creating an account in your name first.[7]

How to Set Up Your Account

  1. Go to ssa.gov/myaccount
  2. Click "Create Account"
  3. Choose your identity verification method (ID.me or Login.gov)
  4. Complete verification (requires ID photo in most cases)
  5. Enable two-factor authentication when prompted

What to Check

  • Address: Is your mailing address correct? Criminals change it to redirect correspondence.
  • Direct deposit: Are your bank details right? Benefit theft often starts here.
  • Earnings record: Any employers you don't recognize? Someone may be working under your SSN.

Nuclear Option: Electronic Access Block

If you're extremely concerned, you can call SSA at (800) 772-1213 to place an Electronic Access Block. This prevents anyone (including you) from accessing your SSA information online. You'd have to handle everything by phone or in person. It's inconvenient but bulletproof.

Beyond the Big Four

These additional steps add more protection if you want to go further:

Fraud Alerts (90 Days or 7 Years)

A fraud alert tells creditors to verify your identity before opening new accounts. Unlike a freeze, it doesn't block access: it just adds a verification step.

  • Standard fraud alert: Lasts 90 days, can be renewed
  • Extended fraud alert: Lasts 7 years, requires police report or FTC Identity Theft Report
  • You only need to contact one bureau, they're required to notify the others

Opt Out of Data Brokers

Your SSN alone isn't always enough for fraud. Criminals combine it with other personal info: address history, phone numbers, relatives' names. Data brokers sell all of this. Opting out reduces the supplementary data available.

Start with the major players: Spokeo, BeenVerified, Whitepages, Intelius. Each has an opt-out process, though they make it deliberately annoying.

Credit Monitoring

Free credit monitoring (through Credit Karma, your bank, or the bureaus themselves) alerts you when something changes on your credit report. It won't prevent fraud, but it catches it faster.

The Hard Truth

None of this stops DOGE (or whoever else has your data) from possessing it. That's already happened. What these tools do is make the data less useful for fraud.

A frozen credit file means your stolen SSN can't be used to open credit cards. An IP PIN means it can't file fake tax returns. Self Lock means it can't get jobs. SSA monitoring means you'll know if someone tries to redirect your benefits.

You're not preventing the breach. You're limiting the damage.

The investigation into DOGE's data handling is ongoing. The Inspector General is reviewing the whistleblower complaints. Congress is holding hearings. But that process takes months or years.

Your protection takes 30 minutes.

Your 30-Minute Protection Checklist

☐ Freeze Credit (3 bureaus)

Equifax, Experian, TransUnion. Do all three. Save your PINs/passwords.

☐ Get IRS IP PIN

irs.gov/identity-theft-fraud-scams/get-an-identity-protection-pin

☐ Enable E-Verify Self Lock

myeverify.uscis.gov → Create account → Manage My SSN → Lock

☐ Claim SSA Account

ssa.gov/myaccount → Check address, direct deposit, earnings

References

  1. Washington Post - DOGE member took Social Security data on a thumb drive, whistleblower alleges (March 10, 2026)
  2. TechCrunch - DOGE employee stole Social Security data and put it on a thumb drive, report says (March 10, 2026)
  3. NPR - Government investigating new claims that DOGE misused Social Security data (March 11, 2026)
  4. FTC - Credit Freezes and Fraud Alerts
  5. IRS - Get an Identity Protection PIN (IP PIN)
  6. E-Verify - Self Lock Feature
  7. TheStreet - Social Security Data Breach: Proactive Steps to Protect Against Identity Theft

Published: March 22, 2026