Should you be concerned about the privacy of your Social Security data?

The experts say, “Yes!”

Attendees heard from two former Social Security Commissioners, along with five other Social Security experts. Each one said we should be concerned about privacy issues and data breaches in the Social Security Administration (SSA). The current president, his sidekick, and the so called “Department of Government Efficiency” (DOGE) boys are wreaking havoc. The DOGE boys (I pronounce as “dough-gie”) are infiltrating the complex Social Security technical computer systems. And undermining the capabilities from the inside.

Furthermore, with layoffs and offers for early retirements, expertise is literally spilling out the doors.

The former Commissioners came out swinging

Former Commissioner Martin O’Malley was the most recent head of Social Security. He is a Democrat who served from December 2023 thru November 2024. He assessed what’s going on inside the SSA: “Most actions to cause a collapse have already been taken by DOGE.”

The gut-punch that took my breath away was his opening salvo.

He went on to add there is now no cybersecurity expertise or security leadership at Social Security. The top three experts quit in the last couple of weeks.

The technical systems are archaic, using programming language that is as old as us Baby Boomers. But they work to correctly calculate Social Security benefits and make payments to 59 million retirees and survivors every month. Along with 9 million receiving SSDI—Social Security Disability Insurance.

The other former Commissioner, Michael Astrue, a Republican served from 2007 to 2013. His comments were measured and halting. He was clearly unhappy to share that today, “Things are just wrong. We should be petrified about privacy and data theft.”

The SSA’s has never had a data breach. It was a secure as a gigantic system can be. But with the migration of trillions of records to somewhere else opens up your Social Security data for privacy invasions.

Other long-time experts are equally concerned about the privacy of your Social Security data

In addition to the two former commissioners, four Social Security experts, advocates, and leaders from across the political spectrum also spoke. The have decades of experience in various parts of the SSA. They are particularly worried about the implications of the dual mandate of sweeping changes and staffing cuts.

The all-star lineup of bipartisan panelists included:

•           Kathleen Romig, Center on Budget and Policy Priorities

•           Jason Fichtner, Academy Senior Fellow

•           Jen Burdick, Community Legal Services

•           Joel Eskovitz, AARP 

Each has unique insight into a certain area of the SSA and how it operates. While we all might think about Social Security as delivering retirement benefits, there is much more to this program. Of particular focus is assisting Americans with disabilities to receive their benefits. It’s the SSA that increases monthly benefits for your annual cost of living adjustment. And they interact with the IRS to calculate each person’s Medicare Part B premium.

Losing 7,000 employees at the SSA is a low-ball estimate

Those getting Social Security benefits don’t magically get them. It’s not like you turn 67 and voila! A deposit just shows up in your bank account. There is a detailed process for vetting each individual and calculating benefits based on personal work history. Often times, people need to produce original documents like marriage certificates or divorce decrees.

A trained, qualified, actual person at the SSA must handle every request for benefits. Only about 25% of applications can be submitted online. Otherwise, you need an appointment. Again, with a real person.

So offering all employees the opportunity to jump ship has far reaching consequences for all of us. Kathleen Romig stated clearly, “If we’re decimating the staff, people won’t get access to get their earned benefits.” Today, it can take 60 days or more to get your Social Security and Medicare Part B application processed. Might as well add a few extra months. Hope you don’t need the money.

Commissioner O’Malley estimated that some 40% to 45% of current Social Security workers are already retirement-eligible. He thinks the estimate of 7,000 employee departures is a low-ball estimate. He wouldn’t be surprised to see 10,000 employees take the money and run.

Calls are flooding into AARP and SSDI offices

Older Americans from 50 to 150 are terribly concerned about the privacy of their Social Security data. They are also wildly concerned about receiving their Social Security benefits. Joel Eskovitz from AARP said the phones have been “busy.” Turns out, hundreds of thousands of AARP members have been calling and sending emails. Their concerns are real and backed by the concerns articulated by each of the panelists.

Another panelist, Jen Burdick, is a lawyer at the Community Legal Services in Philadelphia. For years she’s been assisting some of the most vulnerable citizens access Social Security Disability (DDSI) and Supplemental Social Insurance (SSI) benefits.

Burdick is very concerned with the loss of employees in this highly specialized area. The DOGE boys have mandated a hiring freeze and cut all overtime. However, the calls keep coming. Even when disabled folks wait on hold for hours just to make an appointment.

The disassembly of the field offices unduly limits access to benefits for our most vulnerable citizens. It’s exceptionally cruel. She’s shared the result : adding months to the already painfully slow process. On average, it takes 8 months for an individual to get a decision on an SSDI claim.

Where’s the plan to protect the privacy of your Social Security data?

Jason Fichtner is a former deputy commissioner in the SSA. He was blunt and to the point about what’s been happening at the SSA. The DOGE boys are cutting the very things that would improve efficiency. “Looking for efficiency is a fine objective. But if you were charged with such a task, you would have a strategic plan. Or a business plan with specific goals. Or a plan-plan. They have nothing. This is a disaster.”

There is no plan. No objectives other than to sow fear and concern to the 70 million folks who already depend on Social Security for their very real income. And to throw into a tizzy the 20 million Baby Boomers and older Gen Xers who are on the cusp of making retirement decisions.

Will they be paid their earned benefits? Who has their data? How can they reach an actual person at the SSA to get their questions answered? Where the heck did their field office go?

The raging uncertainty is the crime here. How can anyone plan for retirement if our 90-year-old most successful federal program is being dismantled? Or is it? Where can you get the right information?

Time to take specific steps to help protect your Social Security data

At this time, you can’t get any answers. There is no one peeling back the fearmongering. Conflicting information occurs daily. And no, there are no 150-year-old people. And none of these non-existing people are getting Social Security benefits. It is a travesty.

But there are several steps you can take to help protect the privacy of your Social Security data. It is urgent.

1. Set up your online account.

You’ve heard it from every Social Security advocate and in every article: Set up your online mySocialSecurity account. If you’ve been dragging your heels, time to pick ‘em up and get online! Create your online account whether you are still working or if you have not yet claimed benefits. It’s also important to do if you have already claimed benefits. You are connecting your personal self and your real address to your SSN. Before someone else takes it over.

2. Review your most current statement

Find and download your most current statement if you have not yet claimed benefits. Make sure it shows your 2024 wages. Save a digital copy in PDF. And if you’re like me, you’ll print a copy as well. Review it for accuracy.

This is more for your own peace of mind. It will become a convenient record of your earned benefits. In the event of a dispute, you won’t have to dig through decades of tax returns looking for those original W2’s from 1985.

3. Locate your complete earnings history.

Your online mySocialSecurity account has more information than your statement. In particular, you can find your complete earnings history. The earnings shown on your statement is no longer complete. It only shows the most recent 15 years or so.  

Look for a section labeled “Eligibility and Earnings.” You’ll see green rectangular bars or boxes indicating how many work credits you’ve earned. Underneath the bars is a link called Review your full earnings record now. Download your complete earnings history, and print onto paper if you’d like. Again, as proof of your decades of payments into FICA.

You need to do even more to help protect your financial information

These are already widely known best practices, yet so many of us haven’t done them. Or haven’t found the time to put them in place. Now is that time!

DO NOT click on any links in emails.

Even if the email seems to be from Social Security. The SSA will send you emails from time to time, especially if you have signed up for their blog. It comes in an official template from the SSA. And has this address: Social Security Administration <subscription.service@subscriptions.ssa.gov>

But, they also send generic looking emails with certain information. Could they look any more spammy? It’s these emails that can easily be dangerous. Rather than clicking on the link, simply go directly to SSA.gov and find your way to the information.

Set up 2-factor authentication on all financial accounts.

The new Social Security login process requires you to set up 2-steps anyway. And yes, it’s a pain in the neck to take the extra time to enter the secret agent code. Oh well. This is simply a price we need to pay to stay as secure as possible online.

Set up two-step authentication on every one of your important financial accounts like your bank account, brokerage account, 401(k) at your employer, credit union, credit cards, etc. Also includes accounts where you might only have one relationship such as a mortgage bank or student loan repayment account.

And don’t forget about your electronic health data. With most healthcare systems now online via Epic, your entire health profile is there for the taking. If you don’t take some precautions to lock it down.

Reset all passwords on your financial accounts.

You’ve heard it before. But now you really need to do this. Change or update all passwords on all financial accounts. Best practices from cyber protection experts say you need 16-character or longer. The crazier and more unusual you can make them, the better.

Consider using a password manager or pass phrases. And it really is time to stop using your kids’, grandkids’, or pets’ names!

Freeze your credit and set up fraud alerts.

Each of the three credit bureaus offers easy, straightforward ways to freeze your credit. Experian, Equifax, and TransUnion are the agencies that report how well you have behaved when it comes to repaying loans. They have a slightly different model for calculating your credit score, which is a risk factor to a lender.

It’s a critical number that should be protected. You do that by freezing your credit and adding a fraud alert. That way, if any “bad actors” try to steal your credit or open a new credit card in your name, they are stopped. You will be notified in the event of a breach. If you later need a new mortgage because you’re moving, you simply remove the freeze for a set period of time. Same goes if you want to open a new credit card.

Time to sound the alarm

I have never once felt the need to call my representatives. If I’m completely honest, there were years I didn’t even know who my Congressperson was. Not anymore. I know who they are and what they stand for. I’ve met my representative and attended his town halls. Surprisingly, I even call all three in their DC offices at least once per week. It’s all hands on deck time.

But really, what can one person do? What can you do? It is as simple as calling your two senators and one Congressperson. This is how you can do your part to help protect your privacy of your Social Security data. Whether your representatives are blue or red or purple, they need to hear from you about your concerns.

And you will be heard. Fortunately for many, you probably won’t have to talk to a real person. The staff is drowning in feedback from their constituents, so you’ll go directly into voice mail. You only get about 90 seconds, so you can imagine how often I get cut off mid-sentence!

What to say in your messages?

Calling is the best way to be heard. Make sure to state your name, mailing address, and zip code. Emails from the representative’s websites and letter writing are also good options. But the staffers say those communications fall to the bottom of their priority pole. They are juggling a lot these days.

What to say in your voice mail? Tell your representatives how concerned you are about privacy breaches at Social Security. You want them to do everything they can to protect the privacy of your Social Security data. And the security of your identity. Add anything else that’s making you lose sleep these days. There are just so many options to choose from.

For all of us who have had the privilege of sitting on the sidelines for the past 50+  years, it’s now time to march. It’s time to protest and protect. And, it’s time to talk and take action at the local, state, and federal levels. Not only do we deserve safety and security for our own information, but so do our children and grandchildren.

Resources to help you protect the privacy of your Social Security data:

This article about how to build your passwords from Bitwarden was particularly good. How long should a password be?

Keep informed with the latest at Social Security by subscribing to their blog.

Not sure how to contact your representatives in Congress? No worries, just check by your zip code at https://www.congress.gov/contact-us

Last note: Are you up-to-date on the latest law change in Social Security? WEP and GPO were fully repealed in January.