Usual preface, sharing strictly and solely from a security / privacy interest POV to the exclusion of everything else : https://www.theregister.com/2025/06/10/judge_doge_opm_records/ – Federal court blocks further data sharing, blasts lack of safeguards
The US federal government’s HR department violated the law and bypassed its own cybersecurity safeguards by giving DOGE affiliates access to personnel records, a federal judge ruled Monday, issuing a preliminary injunction to halt further disclosures. … Judge Denise Cote of the Southern District of New York agreed, and said in her decision [PDF] that the plaintiffs were likely to succeed in showing that the OPM violated the Privacy Act and Administrative Procedure Act by giving DOGE-affiliated individuals access to agency data. Access was granted “even though no credible need for access had been demonstrated,” the judge noted. …
In Judge Cotes’ own hand : “OPM’s careless approach toward cybersecurity is reminiscent of the failures that contributed to the 2015 data breach,” and a good reminder WHY “need to know” information barriers are more often than not a good idea.
Regards