Looks like they actually were compromised like many people suspected given their poor security practices.
In it, the whistleblower said DOGE demanded and got god access to the NLRB Azure instance. And they proceeded to turn several things off such as MFA for mobile devices. He also detected login attempts from Russia using DOGE credentials. He apparently took screenshots using his phone’s camera including the powershell commands (similar to CURL) to invoke packages from GitHub.
And then after they launched a formal review of the breaches:
> But on April 3 or 4, the assistant CIO "and I were informed that instructions had come down to drop the US-CERT reporting and investigation and we were directed not to move forward or create an official report," Berulis wrote.
It's truly shocking what the US Gov is letting DOGE get away with, with no oversight.
Elon Musk is now overseeing threats on Federal employees. His fans must be thrilled.