Post

🧵 THREAD: A federal whistleblower just dropped one of the most disturbing cybersecurity disclosures I’ve ever read. He's saying DOGE came in, data went out, and Russians started attempting logins with new valid DOGE passwords Media's coverage wasn't detailed enough so I dug into his testimony:

7.2K reposts13.9K likes

Who’s the whistleblower? Daniel Berulis — a senior DevSecOps architect at the National Labor Relations Board (NLRB), formerly with TS/SCI clearance. He just told Congress the Department of Government Efficiency (DOGE) pulled off a covert cyber op inside a federal agency.

DOGE demanded root access. Not auditor access. Not admin. They were given “tenant owner” privileges in Azure — full control over the NLRB’s cloud, above the CIO himself. This is never supposed to happen.

They disabled the logs. Berulis says DOGE demanded account creation with no recordkeeping. They even ordered security controls bypassed and disabled tools like network watcher so their actions wouldn’t be logged.

And then the data started flowing out. 10+ GB spike in outbound traffic Exfiltration from NxGen, the NLRB's legal case database No corresponding inbound traffic Unusual ephemeral containers and expired storage tokens

Good job. I don’t think non-IT folks appreciate how many of these things DOGE did are *never* allowed- the logs disabled, the root access, the MFA turned off, etc. All part of “defense in depth” to prevent data tampering or theft. DOGE systematically dismantled all security controls & audits.

You're correct. Warning flags started going up for any qualified network administrator or engineer as soon as reports came to light that they were entering government facilities and demanding even read level access with disregard to policies, standards and protocols.

Someone in high authority needs to look into this NOW , if they haven't already. Reading pieces like this does leave me speechless. It just seems so obvious whats going on.

from the beginning, this was always a hostile, government-wide hack of our systems, with intent. considering who’s in charge, not even a little surprising its all in Russia’s hands. this was planned and ordered by hostiles. wait until weird seemingly random shit starts breaking. grids, banking etc

This is because DOGE was using Starlink. The Russians have hacked int Starlink during the Ukraine war, and Starlink is therefore not secure. So the Doge passwords got hacked. Like everything else, the need to make profits leads to taking shortcuts

Thank you. The Russia paranoia is so unhelpful. This fascism is not only homegrown but also incompetent. Framing it as treason obfuscates the number one goal of DOGE: passing public money into private hands. They went after the NLBR ffs! This is the story, not some Cold War conspiracy theory.

Russians attempting to login almost immediately suggests they either spotted a golden opportunity, or... this has become routine for them - everywhere else that DOGE has been, the Russians expect to get in. Why bother protecting anything when these people just serve it up for spies.

This is obviously true just the way he walks us through it I have a husband in tech this is thorough and concise. Let’s hope they allow them to be arrested we should arrest them for stealing our data and each state should sign on

Where is Congress??? Oh silly me … they are hiding under their desks hoping for another distraction like the dropping stock market or bond market rising… Is nobody concerned and seeing the connections here?

dude keeps the original post up, goin very viral, not crediting her & bashing media - instead of lifting up the example of great work by her & her outlet. it’s poor form.

The DOGE boys are running around all of USG carrying phones, laptops, and god knows what other unapproved devices, all of which have likely been thoroughly pwned by a dozen foreign intelligence services. I suppose it's "government efficiency" for Russia, not so much for us.

Rachel Maddow did excellent interview to him/his lawyer in her last night’s show. It was great and scary. And the scariest thing is that probably this was done to ALL THE PLACES DOGE WENT. This is not one-off, this is the pattern - Treasury, IRS, all the places they went. We are all compromised.

Good job, Ms. McLaughlin. Thank you so much. One doesn’t have to be able to understand all of the tech lingo to understand the seriousness and the upcoming fallout of these actions. Thank you for the risks you take and thank goodness for the whistleblower’s bravery.

Apologized elsewhere but doing so here for completeness - Sorry Jenna, I didn't see your story. I saw more of a summary on NBC/CNN that was light on technical detail and I went straight to the testimony and started screenshotting. I've linked your story across all my social media platforms now.

Strange that she showed the graphic from the story prominently and prominently stated where the story came from, and someone who saw it covered on the networks didn't realize there was a source story they were covering.

If a hostile foreign power breached our digital defenses using credentials from DOGE… that’s not just a leak, it’s a national security failure disguised as deregulation. ELON IS AN AGENT OF RUSSIA 👀 Russia is at the gates. We need to wake tf up. Great thread matt 🙏🏻

With each passing day, Trump is losing more of his very conservative base, including legal scholars, about the deportation case, arbitrary and capricious funding freezes, blackmailing the law firms and universities in exchange for pro bono work, and for grants to the universities No Kings Saturday

DOGE cavalier conduct with our countries most sensitive information is a national security threat.Remember when Trump fought tooth and nail to not have his tax info released?Now his minions are accessing everyone's data.The prospect of weaponized leaks is real.The prospect of obstruction as well. ✌️

This is what I thought was going on all along. The whole thing was too fast, and they hid it. If you're truly cutting 'waste', you'll be public about it. Time to get DOGE out of the govenment and investigate them all.

NPR covered this story two nights ago, nearly as in-depth as you present here, though you specifically list the tools used, etc. I was livid and sick to my stomach all at the same time by the end of the story. These crimes can't continue. They must be stopped.