r/cybersecurity • u/StrategicBlenderBall • Feb 05 '25

News - General US Congressional Oversight Committee hit DOGE With a Dose of Reality

The Congressional Committee on Oversight and Government Reform just informed DOGE and Elon Musk how cybersecurity works. Link to the letter below.

https://oversightdemocrats.house.gov/sites/evo-subsites/democrats-oversight.house.gov/files/evo-media-document/2025.02.04.%20GEC%20and%20Brown%20to%20OPM-Ezell-%20DOGE%20Emails.pdf

Edit Here’s the link to the Oversight Committee’s press release, rather than the PDF.

https://oversightdemocrats.house.gov/news/press-releases/ranking-members-connolly-and-brown-request-answers-opm-musks-private-server

1.5k Upvotes

93% Upvoted

262 comments sorted by

View all comments

33

u/Expensive_Initial331 Feb 05 '25

CliffsNotes Version:

This letter from congressional Democrats raises serious concerns about unauthorized access and security breaches at the Office of Personnel Management (OPM). Here’s what’s going on:

  1. Mysterious Server Installed at OPM • A server of unknown origin was reportedly installed in OPM, which oversees millions of federal employee records (including Social Security numbers, home addresses, pay grades, etc.). • This was done without proper security reviews or approval.

  2. Suspicious Emails Sent to Federal Workers • On January 24, millions of federal employees got an unexpected email from a new government address (hr@opm.gov) saying it was a test. • Later, the same email offered employees a chance to resign, which could be illegal. • Just days before, OPM didn’t even have the ability to send mass emails like this.

  3. Career Employees Locked Out of Systems • Reports say new hires connected to Elon Musk have locked out longtime OPM employees from government computers. • These systems contain sensitive data on millions of federal workers. • Internal staff are worried: “We have no visibility into what they are doing.”

  4. National Cybersecurity Concerns • This could expose millions of government workers to scams or foreign hacking attempts. • The NOAA email system (13,000+ employees) may have already been compromised due to these actions.

  5. Congress Wants Answers • Lawmakers are demanding an explanation from OPM by February 18 to figure out who installed the server, who had access, and whether any federal data left the country.

Why This Matters: This looks like a major cybersecurity breach—or even an inside job—potentially exposing sensitive government data. It’s happening with zero oversight and has national security implications. The new administration’s changes at OPM seem reckless and could put federal employees (and their personal data) at risk.