Berulis, who works at the labor board, wrote in the declaration that within days of DOGE staffers arriving in March, he noticed a series of anomalous events in the boards computer systems. Those included changes to the use of multi-factor authentication, which is a widely used security protocol, and internal alerting systems being switched off, he wrote in the 14-page statement.
He also wrote that he tracked what appeared to be the outbound transfer of around 10 gigabytes or more of data the equivalent of a full stack of encyclopedias if the data were all text files, he wrote. He wrote that the removal was extremely unusual because data almost never directly leaves NLRBs databases.
The database accessed by DOGE contained personally identifiable information of claimants and respondents with pending matters before the agency as well as confidential business information gathered during investigations, he wrote.
He added that after DOGE gained access to the labor boards systems, there was an increase in attempted logins from locations outside the United States including from a user with an internet protocol (IP) address in Russia. He wrote that the person with the Russian IP address appeared to have a correct username and password, created minutes earlier by DOGE engineers, and was blocked from logging in only because of their location.
https://www.nbcnews.com/tech/security/federal-employee-alleges-doge-activity-resulted-data-breach-labor-boar-rcna201425