SUBSCRIBE TO OUR FREE NEWSLETTER
Daily news & progressive opinion—funded by the people, not the corporations—delivered straight to your inbox.
5
#000000
#FFFFFF
");background-position:center;background-size:19px 19px;background-repeat:no-repeat;background-color:#222;padding:0;width:var(--form-elem-height);height:var(--form-elem-height);font-size:0;}:is(.js-newsletter-wrapper, .newsletter_bar.newsletter-wrapper) .widget__body:has(.response:not(:empty)) :is(.widget__headline, .widget__subheadline, #mc_embed_signup .mc-field-group, #mc_embed_signup input[type="submit"]){display:none;}:is(.grey_newsblock .newsletter-wrapper, .newsletter-wrapper) #mce-responses:has(.response:not(:empty)){grid-row:1 / -1;grid-column:1 / -1;}.newsletter-wrapper .widget__body > .snark-line:has(.response:not(:empty)){grid-column:1 / -1;}:is(.grey_newsblock .newsletter-wrapper, .newsletter-wrapper) :is(.newsletter-campaign:has(.response:not(:empty)), .newsletter-and-social:has(.response:not(:empty))){width:100%;}.newsletter-wrapper .newsletter_bar_col{display:flex;flex-wrap:wrap;justify-content:center;align-items:center;gap:8px 20px;margin:0 auto;}.newsletter-wrapper .newsletter_bar_col .text-element{display:flex;color:var(--shares-color);margin:0 !important;font-weight:400 !important;font-size:16px !important;}.newsletter-wrapper .newsletter_bar_col .whitebar_social{display:flex;gap:12px;width:auto;}.newsletter-wrapper .newsletter_bar_col a{margin:0;background-color:#0000;padding:0;width:32px;height:32px;}.newsletter-wrapper .social_icon:after{display:none;}.newsletter-wrapper .widget article:before, .newsletter-wrapper .widget article:after{display:none;}#sFollow_Block_0_0_1_0_0_0_1{margin:0;}.donation_banner{position:relative;background:#000;}.donation_banner .posts-custom *, .donation_banner .posts-custom :after, .donation_banner .posts-custom :before{margin:0;}.donation_banner .posts-custom .widget{position:absolute;inset:0;}.donation_banner__wrapper{position:relative;z-index:2;pointer-events:none;}.donation_banner .donate_btn{position:relative;z-index:2;}#sSHARED_-_Support_Block_0_0_7_0_0_3_1_0{color:#fff;}#sSHARED_-_Support_Block_0_0_7_0_0_3_1_1{font-weight:normal;}.sticky-sidebar{margin:auto;}@media (min-width: 980px){.main:has(.sticky-sidebar){overflow:visible;}}@media (min-width: 980px){.row:has(.sticky-sidebar){display:flex;overflow:visible;}}@media (min-width: 980px){.sticky-sidebar{position:-webkit-sticky;position:sticky;top:100px;transition:top .3s ease-in-out, position .3s ease-in-out;}}.grey_newsblock .newsletter-wrapper, .newsletter-wrapper, .newsletter-wrapper.sidebar{background:linear-gradient(91deg, #005dc7 28%, #1d63b2 65%, #0353ae 85%);}
To donate by check, phone, or other method, see our More Ways to Give page.
Daily news & progressive opinion—funded by the people, not the corporations—delivered straight to your inbox.
The Oregon Democrat also informed colleagues of his staff's findings that "senators have been kept in the dark about executive branch surveillance of Senate phones," in apparent violation of companies' contracts.
U.S. Sen. Ron Wyden shared the results of his staff's probe into major phone companies in a Wednesday letter to congressional colleagues and also publicly highlighted which carriers disclose government spying to their customers.
"An investigation by my staff revealed that until recently, senators have been kept in the dark about executive branch surveillance of Senate phones, because the three major phone carriers—AT&T, Verizon, and T-Mobile—failed to establish systems to notify offices about surveillance requests, as required by their Senate contracts," states the letter, published on Wyden's (D-Ore.) congressional website.
"While now rectified for Senate-funded lines, significant gaps remain, especially for the campaign and personal phones used by most senators. I urge your support for legislative changes to allow the sergeant at arms (SAA) to protect senators' phones and accounts from cyber threats, both foreign and domestic," he wrote. "I also urge you to consider switching your campaign and personal phone lines to other carriers that will provide notice of government surveillance."
Wyden noted that "while AT&T and Verizon only provide notice of surveillance of phone lines paid for by the Senate, T-Mobile has informed my staff that it will provide notice for senators' campaign or personal lines flagged as such by the SAA. Three other carriers—Google Fi Wireless, U.S. Mobile, and Cape—have policies of notifying all customers about government demands whenever they are allowed to do so. The latter two companies adopted these policies after outreach from my office."
In a Wednesday statement announcing the letter and the above chart, Wyden's office warned that "beyond members of Congress, journalists, political activists, people seeking reproductive healthcare, and other law-abiding Americans who could be targeted by the government all have reason to be concerned about secret surveillance of their communications and location data."
The findings of his staff include details relevant to every American with a cellphone, but much of Wyden's letter is focused on improving protections for lawmakers. He pointed to "two troubling incidents" that "highlight the vulnerability of Senate communications" to foreign adversaries and U.S. law enforcement: Chinese Salt Typhoon hackers and the U.S. Department of Justice, during the first Trump administration, both collected records of lawmakers and their staff.
"Executive branch surveillance poses a significant threat to the Senate's independence and the foundational principle of separation of powers," Wyden argued. "If law enforcement officials, whether at the federal, state, or even local level, can secretly obtain senators' location data or call histories, our ability to perform our constitutional duties is severely threatened."
"This kind of unchecked surveillance can chill critical oversight activities, undermine confidential communications essential for legislative deliberations, and ultimately erode the legislative branch's co-equal status," he continued. Wyden called on senators to support his proposals for the next annual appropriations bill "that would allow the SAA to protect senators' phones and accounts—whether official, campaign, or personal—against cyber threats, just as we have for executive branch employees."
The longtime privacy advocate's letter to fellow senators was first reported by Politico, which noted that T-Mobile did not immediately respond to requests for comment while spokespeople for AT&T and Verizon defended their companies.
"We are complying with our obligations to the Senate sergeant at arms," AT&T spokesperson Alex Byers said in a statement to the outlet. "We have received no legal demands regarding Senate offices under the current contract, which began last June."
Verizon spokesperson Richard Young told Politico that "we respect the senator's view that providers should give notice to senators if we receive legal process regarding their use of their personal devices, but disagree with his policy position."
Meanwhile, Sean Vitka, executive director of Demand Progress—an advocacy group long critical of government spying on lawmakers and warrantless surveillance—said in response to the revelations from Wyden's office that "we now know that Comcast, Verizon, T-Mobile, and other phone companies have followed AT&T's unprecedented efforts to facilitate secret government surveillance of their own customers, with some even allowing the government to secretly spy on senators."
"This is a bright, red warning sign at a time when the Trump administration keeps blowing past constitutional checks on executive power and is siccing the Justice Department on elected lawmakers," Vitka added. "These companies should be shamed and ashamed until they fix this."
"If the plundering of Americans' data wasn't concerning enough, the targeted, physical threats and surveillance... takes this to another level," said the whistleblower's attorney.
Despite finding a letter with "threatening language, sensitive personal information, and overhead pictures of him walking his dog" taped to his door, a technology expert at a federal labor agency has become a whistleblower, urging U.S. officials to investigate data practices by President Donald Trump and billionaire Elon Musk's so-called Department of Government Efficiency.
NPR on Tuesday published a lengthy report about whistleblower Daniel Berulis' submission to Congress and the U.S. Office of Special Counsel sounding the alarm over DOGE employees' recent activities at the National Labor Relations Board (NLRB)—which the president also has tried to effectively shut down, leading to court battles.
While DOGE didn't respond to NPR's request for comment, Tim Bearese, the NLRB's acting press secretary, claimed that the Musk-led entity had not requested access to the agency's system, and the NLRB had not granted it. He also said the agency investigated after Berulis raised concerns but "determined that no breach of agency systems occurred."
"As an agency protecting employee rights, the NLRB respects its employee's right to bring whistleblower claims to Congress and the Office of Special Counsel, and the agency looks forward to working with those entities to resolve the complaints," he added.
Those who spoke with NPR struck a much different tone. The reporting features interviews with Bearese, his attorney—Andrew Bakaj of Whistleblower Aid—and dozens of other experts in tech, law enforcement, the labor movement, and government. It adds to mounting worries about what DOGE is doing across various agencies under the reign of the richest man on Earth.
"I can't attest to what their end goal was or what they're doing with the data," Berulis—who found evidence of up to around 10 gigabytes of data, or the equivalent of a full stack of encyclopedias, leaving the NLRB system—told NPR. "But I can tell you that the bits of the puzzle that I can quantify are scary... This is a very bad picture we're looking at."
There's always been reason to believe DOGE was hacking govt systems. Now a whistleblower has substantiated it at NLRB, precisely the kind of data compromise labor unions worried about when they sued re DOL.
[image or embed]
— emptywheel ( @emptywheel.bsky.social) April 15, 2025 at 6:26 AM
"The amount of data that was taken is the equivalent to a section of the New York Public Library, and the amount of people it could impact is in the hundreds of millions," Berulis noted in a Tuesday statement from Whistleblower Aid. "Our information systems appear to have been assaulted, and someone with the capacity and mandate to investigate needs to do so."
According to NPR, labor law experts "fear that if the data gets out, it could be abused, including by private companies with cases before the agency that might get insights into damaging testimony, union leadership, legal strategies and internal data on competitors—Musk's SpaceX among them. It could also intimidate whistleblowers who might speak up about unfair labor practices, and it could sow distrust in the NLRB's independence."
Russ Handorf, who spent a decade in cybersecurity roles at the Federal Bureau of Investigation, reviewed Berulis' records and told NPR that "all of this is alarming" and "if this was a publicly traded company, I would have to report this [breach] to the Securities and Exchange Commission."
Sharon Block, a former NLRB board member and now executive director of Harvard Law School's Center for Labor and a Just Economy, said that "there is nothing that I can see about what DOGE is doing that follows any of the standard procedures for how you do an audit that has integrity and that's meaningful and will actually produce results that serve the normal auditing function, which is to look for fraud, waste, and abuse."
"The mismatch between what they're doing and the established, professional way to do what they say they're doing... that just kind of gives away the store, that they are not actually about finding more efficient ways for the government to operate," she told NPR.
It's not just DOGE affiliates, including Musk, who may have access to the data taken from federal agencies, including the NLRB. NPR reported that "if the data isn't properly protected after it leaves the agency or if DOGE left a digital door open to the agency itself, data could also be exposed to potential sale or theft by criminals or foreign adversaries."
In Whistleblower Aid's statement, Bakaj said that "what is particularly alarming is that in addition to private data being exfiltrated out of NLRB systems—and within minutes of DOGE personnel creating service/user accounts in NLRB systems—someone or something within Russia appeared to attempt to login using all of the correct credentials (e.g. usernames/passwords) on several occasions. This near real-time unlimited access by Russian actors heightens concerns to a level not previously seen and could have destroyed the agency's entire infrastructure in a matter of minutes."
"If the compromise of American's data wasn't concerning enough, the targeted, physical threats and surveillance of my client takes this to another level," he added. "It is time for Congress to act and investigate to keep our democracy from slipping away, something that could take generations to repair."
While NPR readers called the report "sickening" and shared warnings of "technofascism," there is also some optimism in this story: Berulis hopes that he not only prompts a probe but also provides a roadmap for other government employees to come forward.
"I believe with all my heart that this goes far beyond just case data," the whistleblower said. "I know there are [people] at other agencies who have seen similar behavior. I firmly believe that this is happening maybe even to a greater extent at other agencies."
"It is long overdue that Microsoft and other Big Tech monopolies are broken up—for good," said one expert.
Digital rights advocates responded to Friday's havoc-wreaking global technology outage by sounding the alarm on the Big Tech monopolies.
The outage—which is being attributed to a software update by the U.S.-based cybersecurity firm CrowdStrike—sparked worldwide chaos on Friday, causing so-called "blue screens of death" on computers using Microsoft Windows. The outage grounded commercial flights and caused serious disruptions to transportation, financial, and healthcare systems.
"Today's massive global Microsoft outage is the result of a software monopoly that has become a single point of failure for too much of the global economy," George Rakis, executive director of the advocacy group NextGen Competition, said in a statement.
"For decades, Microsoft's pursuit of a vendor lock-in strategy has prevented the public and private sectors from diversifying their IT capabilities," he continued. "From airports to hospitals to 911 call centers to financial systems, millions today are feeling the consequences of the greed and ego of one of the most egregious offenders in Big Tech."
Emily Peterson-Cassin, who heads Demand Progress' corporate power program, said that "today's outage shows how one software issue stemming from only one or two companies can ground flights, take down hospital systems, stop 911 calls, and cut off access to the internet in one fell swoop."
"Economy-wide reliance on a few giant companies is a serious fundamental risk to Americans," she asserted. "No one regulatory or legislative intervention will prevent this kind of situation, but there are plenty of policies that can reduce the danger. Efforts to empower regulators' ability to tackle the risks posed by concentrated corporate actors are critical to protecting Americans from these kinds of failures."
Bloomberg columnist Parmy Olson—who focuses on tech issues—said that Friday's outage "should spur Microsoft and other IT firms to do more than simply administer a Band-aid."
"The bigger problem is the supply chain itself for cloud computing and, by extension, cybersecurity services, which has left too many organizations vulnerable to a single point of failure," she noted. "When just three companies—Microsoft, Amazon, and Google—dominate the market for cloud computing, one minor incident can have global ramifications."
European Union nations "are furthest ahead in addressing the market stranglehold that these so-called hyperscalers have with the new E.U. Data Act, which aims to lower the cost of switching between cloud providers and improve interoperability," Olson noted.
"U.S. legislators should get in the game too," she argued. "One idea might be to force companies in critical sectors like healthcare, finance, transportation, and energy to use more than just one cloud provider for their core infrastructure, which tends to be the status quo."
"Instead, a new regulation could force them to use at least two independent providers for their core operations, or at least ensure that no single provider accounts for more than about two-thirds of their critical IT infrastructure," Olson added. "If one provider has a catastrophic failure, the other can keep things running."
However, most congressional efforts to rein in Big Tech monopoly power and encourage competition have failed or languished amid opposition and obstruction from lobbyists and corporate lawmakers.
Ultimately, Rakis stressed, "it is long overdue that Microsoft and other Big Tech monopolies are broken up—for good."
"Microsoft has turned a blind eye to cybersecurity vulnerabilities for years and enough is enough," Rakis said. "Not only are these monopolies too big to care, they're too big to manage. And despite being too big to fail, they have failed us. Time and time again. Now, it's time for a reckoning. We can't continue to let Microsoft's executives downplay their role in making all of us more vulnerable."