Who’s they? By “they” you mean government. That’s not an atomic unit. The gov has many govs therein and those govs are not aligned. Read the article.
“A filing summarized on Representative John Larson’s website states that DOGE workers used the third party service Cloudflare in March 2025 in a way that violated Social Security’s own security policies, and that DOGE employees attempted to pass sensitive personal records to an outside advocacy group seeking to overturn election results.”
…
“The Department of Justice has since admitted in another case that earlier statements to the courts about DOGE’s access were inaccurate.”
…
“A press release from the American Federation of State, County and Municipal Employees describes how Justice Department filings acknowledged that individuals’ personal data had been disclosed to third parties using a non-government server, and that DOGE operatives entered Social Security systems without proper authority, bypassing safeguards and putting bank accounts, health records, wage histories, and immigration status at risk.”
So policy violations, inaccurate testimony, and improper authority.. clearly some key gov agencies see this as a data breach.