Cybersecurity Policy Report, DOGE Access to SBA Systems Reflects ‘Flagrant Disregard’ for Data Security, Rep. Velázquez Says, (Aug 11, 2025)
Citing “flagrant disregard for security protocols,” Rep. Nydia Velázquez (D., N.Y.), ranking member of the House Small Business Committee, has asked the Small Business Administration to explain why it gave personnel from the White House Department of Government Efficiency (DOGE) access to sensitive SBA data.
“In testimony before the Senate Committee on Small Business and Entrepreneurship in May, you stated that DOGE operatives ‘have not had access’ to personal or sensitive small business information,” Rep. Velázquez noted in a letter to SBA Administrator Kelly Loeffler.
“However, email communications reviewed by Wired show that on February 3, 2025, senior SBA staff urgently requested broad access for DOGE operatives to both SBA and National Finance Center (NFC) information systems,” Rep. Velázquez said.
“‘Admin access’ was reportedly granted within hours to systems containing highly sensitive information—such as Social Security and Employer Identification numbers—of SBA staff and of the millions of small business owners, homeowners, and renters who have used SBA lending programs, including disaster assistance loans,” she said.
“These reports present a troubling account of SBA’s disregard for basic controls on sensitive data as it expedited access for DOGE operatives. The speed with which SBA granted access makes clear that it failed to protect personal information by bypassing the standard screening and security clearance processes required of government employees who handle sensitive information,” she added.
“Given these discrepancies between your testimony before the Senate and House Small Business Committee, and the reporting by Wired, I have serious concerns about the omission of critical information to Congress,” according to the letter, which was dated Aug. 5 and released today.
SBA has demonstrated an “egregious lack of transparency,” Rep. Velázquez said. She asked Ms. Loeffler to provide a “detailed and thorough response” to her letter by Aug. 22 explaining what DOGE was doing at SBA and whether DOGE personnel had received security training, among other things.
News: FederalLegislation DataSecurity