www.theregister.com

... Berulis's document points out that not even his CIO enjoyed the level of access given to DOGE unit operatives, and that the NLRB already had auditor accounts set up that provided enough privileges to check data without being able to edit, copy, or remove it. The "suggestion that they use these accounts instead was not open to discussion," he wrote.

"In the same conversation it was conveyed that we were to hand over any requested accounts, stay out of DOGE's way entirely, and assist them when they asked," he recounted.

Within days, Berulis says, he began to notice worrying signs, such as alerting and monitoring tools being switched off and changes to multi-factor authentication.

He also observed "gigabytes" of data "exiting" a case management application called NxGen over the network, and claimed he later saw 10 GB of data exfiltrated from the agency. ...