A now-former DOGE aide violated US Treasury policy by emailing an unencrypted database containing people's private information to two Trump administration officials, according to a court document filed Friday.

That filing pertains to a February [1]lawsuit brought by New York Attorney General Letitia James and 18 other state AGs challenging DOGE's access to the Treasury Department's Bureau of Fiscal Services (BFS), which [2]disburses trillions of dollars annually to US households, federal employees, and contractors including Social Security and Medicare benefits, tax credits, and grants and payments.

DOGE being the [3]Trump-blessed unit , operated by the President's éminence grease Elon Musk, that has been going around the federal government looking for [4]costs to trim , projects and programs [5]to cancel , and thousands of civil servants [6]to lay off . DOGE had been [7]poking around inside the Treasury's systems [8]ostensibly to find evidence of fraud and to flag up transactions the Tesla tycoon [9]disapproved of , which New York et al in their lawsuit argue was digitally insecure and legally unsound.

[10]

The latest filing

[11]PDF

contains sworn testimony of David Ambrose, the chief security and privacy officer at the BFS, who told the court that then-DOGE operative Marko Elez violated Treasury rules by sending the unencrypted database including personally identifiable information and by not obtaining prior approval for the transmission.

[12]

[13]

Elez, who had been granted access to BFS systems and equipment in January and early February, [14]resigned soon after when evidence emerged linking him to a Twitter account that had pushed for hate against Indian people, advocated for a "eugenic immigration policy," and boasted: "I was racist before it was cool."

After his departure, Treasury security personnel performed a forensic analysis of Elez's presumably administration-assigned email account and government-issued laptop, according to the testimony.

[15]

This analysis "revealed that Elez did not make any alterations or changes to bureau payment systems," it notes.

As an aside, that's important because it was earlier speculated or rumored Elez had been given full super-user read-write access to production Treasury systems to alter payment processes and information, and had used that capability, but [16]it turns out – according to the department's senior IT staff at least – that wasn't quite right, and that Elez had much more locked-down access, confined to a govt-issued laptop, a secure sand-box environment with a copy of the dept's source code, and a read-only view of data. There was no ability to push changes to production, we're told.

Earlier testimony submitted in the case stated Elez made at least one change, albeit indirectly via Treasury staff, to identify certain payments, seemingly so that the Secretary of State could more easily review them.

[17]

And Elez was also accidentally given read-write-level access at one point, but this was quickly changed to read-only, and no evidence was found that he had used that privilege or was even aware of it.

[18]Judge says US Treasury 'more vulnerable to hacking' since Trump let the DOGE out

[19]Federal judge tightens DOGE leash over critical Treasury payment system access

[20]DOGE geek with Treasury payment system access now quits amid racist tweet claims

[21]Musk's DOGE ship gets 'full' access to Treasury payment system, sinks USAID

The latest testimony adds the email with a spreadsheet containing personal info is a different story to the inspection of payment system code, however. The data included a name (either a person or entity — the court document doesn't specify), a transaction type, and an amount of money.

While the analysis concluded the info is "low-risk," because it didn't also include social security numbers or more specific identifiers, "Elez's distribution of this spreadsheet was contrary to BFS policies," the testimony claims.

Specifically: "It was not sent encrypted, and he did not obtain prior approval of the transmission via a Form 7005, describing what will be sent and what safeguards the sender will implement to protect the information," it continues.

The testimony also addresses Elez's security clearance, which has been a point of contention among the state AGs and Democratic lawmakers. Elez was granted an interim secret clearance on January 22, and as such was "eligible to access the Bureau's Systems and Equipment." ®

Get our [22]Tech Resources



[1] https://www.theregister.com/2025/02/10/doge_infosec_impact_court_order/

[2] https://www.theregister.com/2025/02/03/musk_doge_treasury_usaid/

[3] https://search.theregister.com/?q=DOGE&site=

[4] https://www.theregister.com/2025/03/05/us_government_job_cuts_nsa/

[5] https://www.theregister.com/2025/03/12/doge_veterans_affairs_contract/

[6] https://www.theregister.com/2025/03/14/government_jobs_ruling/

[7] https://www.cbpp.org/research/federal-budget/doge-access-to-treasury-payment-systems-raises-serious-risks

[8] https://www.theregister.com/2025/02/05/tom_krause_treasury_read_only_access/

[9] https://www.theregister.com/2025/02/03/musk_doge_treasury_usaid/

[10] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/cso&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=2&c=2Z9j98tPrkc4cCAWWXcxaywAAAZI&t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0

[11] https://storage.courtlistener.com/recap/gov.uscourts.nysd.636609/gov.uscourts.nysd.636609.116.1.pdf

[12] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/cso&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44Z9j98tPrkc4cCAWWXcxaywAAAZI&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0

[13] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/cso&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33Z9j98tPrkc4cCAWWXcxaywAAAZI&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0

[14] https://www.theregister.com/2025/02/07/doge_staffer_twitter/

[15] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/cso&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44Z9j98tPrkc4cCAWWXcxaywAAAZI&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0

[16] https://www.zetter-zeroday.com/court-documents-shed-new-light-on-doge-access-and-activity-at-treasury-department/

[17] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/cso&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33Z9j98tPrkc4cCAWWXcxaywAAAZI&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0

[18] https://www.theregister.com/2025/02/10/doge_infosec_impact_court_order/

[19] https://www.theregister.com/2025/02/06/federal_court_leashes_doges_tresury_access/

[20] https://www.theregister.com/2025/02/07/doge_staffer_twitter/

[21] https://www.theregister.com/2025/02/03/musk_doge_treasury_usaid/

[22] https://whitepapers.theregister.com/