A federal whistleblower named “ Daniel Berulis ,” a senior DevSecOps architect , has reportedly filed an affidavit regarding a major data breach with the U.S. National Labor Relations Board (NLRB) . According to his claim, personnel from the Department of Government Efficiency (DOGE) gained access to sensitive data, potentially exposing critical systems due to the breach.
See also: Legends International reveals data breach
The whistleblower’s allegations first came to light in a detailed post on X by cybersecurity expert Matt Johansen , who called the revelation “ one of the most disturbing cybersecurity revelations I’ve ever read .” He claims that DOGE personnel hacked into NLRB systems, extracted a large amount of data, and then attempted to log in from Russian IP addresses using valid DOGE credentials.
According to the whistleblower’s affidavit, which was emailed to key members of Congress, including Senators Bill Cassidy and Bernie Sanders of the Senate Health, Education, Labor, and Pensions Committee, and Representatives James Comer and Gerald E. Connolly of the House Oversight and Government Reform Committee, DOGE (Department of Government Efficiency) staff were granted unprecedented “owner tenant” access to the cloud systems .
See also: 4chan breach leaks internal data
The whistleblower also reports receiving a phone call in which an Associate Chief Information Officer (ACIO) explicitly stated that orders had been given not to follow standard operating procedures (SOPs) regarding the creation of DOGE accounts and the recording of related records.
The ACIO emphasized that no records or logs were to be created for the accounts created for DOGE employees. DOGE officials were to be given the highest level of access, with unrestricted access to internal systems. This level of access, which exceeded even that of the organization’s Chief Information Officer, allowed them to read, copy, and modify data without restriction.
See also: Landmark Admin data breach affects 1.6 million people
What makes the whistleblower’s revelations particularly troubling is not just the breach of DOGE’s security protocols, but the alleged deliberate circumvention of them by senior executives. Granting “tenant owner” access to external entities, without a record and with instructions not to follow standard operating procedures (SOPs), indicates not just negligence, but also a possible intentional breach of cybersecurity. If the allegations prove true, they endanger the integrity of an independent institution and national security.
Source: cybersecuritynews
🔒 Protect your privacy with Proton VPN
Swiss VPN from the creators of Proton Mail — strict no-logs policy, strong encryption, and built-in NetShield that blocks ads, trackers, & malware.
- ✔ No-logs, based in Switzerland (except 14-Eyes)
- ✔ NetShield: blocks ads, trackers & malicious domains
- ✔ Covers all devices — free version available
The link is an affiliate link — SecNews may receive a commission at no additional cost to you. It does not affect the independence of our article writing.
