NLRB whistleblower alleges DOGE siphoned case data

According to the NPR article, a whistleblower named Daniel Berulis alleged that DOGE engineers accessed the National Labor Relations Board’s sensitive case management system and potentially exfiltrated around 10 gigabytes of data, including confidential information about union organizing, ongoing legal cases, and employee personal details. The whistleblower was particularly alarmed by the engineers’ attempts to hide their tracks, such as disabling logging tools, deleting accounts, and creating suspicious code repositories, which cybersecurity experts compared to the tactics of “criminal or state-sponsored hackers” and raised concerns about potential data exposure to competitors or foreign adversaries. Brian Krebs, who spoke with Berulis, adds that more than 20 login attempts came from a Russian IP address using valid credentials for a DOGE account created minutes earlier, and only a policy blocking logins from outside the country stopped them.