Post #3037535

Ok, so I'm a pretty decent programmer, but I'm only OK at devops. And security is not my specialty. However, just knowing the basics every rank and file engineer working in the industry has to know, it's clear that this is about the most serious data breach it is possible to have, and it was 💯 intentional. My reading of the chain of events - DOGE was given a number of accounts on NLRB's systems, with access levels higher than even the agency's administrators - Within minutes of those accounts being created, systems in Russia were using them. They were initially blocked, because of basic access policies disallowing international logins, but it can be safely assumed that the geographic block was worked around near instantly, because that's no harder than evading a ban on 4chan - Just about every access monitoring and usage tracking system was immediately switched off, and the logs wiped, including those that would show who did it - Basically all of NLRBs records (including much personal information on basically every labor organizer or labor lawyer in America, to say nothing of every labor complaint ever filed or investigated) were copied away to points unknown, and the agency only found out about it from the bandwidth bill & spike in load - an unknown amount of shit was simply deleted - persistent backdoors into the system were created - when this textbook "insider threat" pattern was noticed, an investigation was launched as any sane security policy would require - the administration promptly ordered the investigation shut down - death threats were then made against the person who noticed and the lawyers helping them report it. https://whistlebloweraid.org/wp-content/uploads/2025/04/2025_0414_Berulis-Disclosure-with-Exhibits.s.pdf