Forest Global Training Partners

Cyber Risks · Krebs on Security

Whistleblower: DOGE Siphoned NLRB Case Data

Summary: An NLRB security architect, Daniel J. Berulis, alleged in an April 14 letter to the Senate Select Committee on Intelligence that DOGE staff created privileged 'tenant admin' accounts exempt from network logging and transferred roughly 10 gigabytes from the agency's NxGen case management system in early March. Berulis also reported more than 20 blocked login attempts from a Russian IP address using valid credentials for a DOGE account created minutes earlier, missing logs, an Azure network watcher set to 'off,' and instructions on April 3-4 to drop a planned US-CERT report.

What's compelling: The accounts Berulis describes could read, copy, alter, and delete the agency's logs, so the very records that would establish what left the network were under the control of the accounts under scrutiny. The NLRB's acting press secretary told NPR that DOGE neither requested nor received access and that no breach occurred, leaving a direct conflict between the agency's account and its own security architect's sworn complaint.

Read the original at Krebs on Security ↗

Topics
Data Breaches
Related