John Solly is a software engineer who reportedly worked with the DOGE team at the Social Security Administration before joining Leidos as chief technology officer of its health-IT division. A whistleblower complaint allegedly said that an unnamed former DOGE employee kept copies of sensitive SSA databases on a thumb drive and wanted help moving and “sanitizing” the data for use at a private-sector employer. WIRED identified that employee as Solly.
Solly, through his attorney, denied accessing, retaining, or sharing personally identifiable information. Leidos said its internal investigation and digital-forensics review found no evidence that SSA data reached its systems or that Solly connected a thumb drive to his company laptop. SSA also denied that its data had been compromised. The available public reporting therefore establishes a serious allegation and ongoing oversight—not a proven theft or confirmed transfer.
As an Amazon Associate I earn from qualifying purchases.
Who is John Solly?
Solly is described in reporting as a software engineer and former DOGE worker assigned to the Social Security Administration. Materials associated with his résumé and personal website reportedly describe work involving digital Social Security number initiatives, cleanup of the Death Master File, Social Security number verification, and the EDEN 2.0 project. Those details should be understood as résumé and reporting-based descriptions rather than a complete, independently published government personnel record. WIRED’s account also reported that Solly joined Leidos in October 2025.
PC Slower Than It Used to Be?
A free scan shows the junk files, broken settings and background clutter dragging Windows down - then fixes them in one click.Free scan · Windows 10 & 11Outdated Drivers Are Slowing You Down
One free scan finds every outdated or missing driver and matches the right update for your exact hardware.Free scan · exact hardware matchAt Leidos, Solly became chief technology officer of the company’s health-IT division. The position was also identified in a March 9, 2026 letter from House Oversight Democrats.
#1 Best Overall
- Hardware encrypted drive
- Simple to use pin access. RPM-5400
- Administrator password feature
- Bus powered
- Utilizes Military Grade FIPS PUB 197 Validated Encryption Algorithm
The timing is central to the controversy: the complaint reportedly described sensitive SSA information being retained after government work and potentially used at a new private-sector employer. That employment sequence, by itself, does not establish that Leidos requested, received, or benefited from any data.
What the whistleblower complaint alleges
The complaint was reportedly filed with the SSA Office of Inspector General on January 9, 2026, and amended on January 26. According to reporting by The Washington Post, later summarized by other outlets, the complaint described an unnamed former DOGE employee who allegedly:
- Had copies of the SSA’s NUMIDENT database and the Death Master File;
- Stored the information on a thumb drive;
- Retained an agency laptop and credentials after leaving government work;
- Asked for help transferring data from the thumb drive to a personal computer;
- Wanted to “sanitize” the information before using it at his new company; and
- Claimed he expected a presidential pardon if the conduct turned out to be unlawful.
The Washington Post report did not publicly name the employee. WIRED later reported that sources, reporting, and résumé information identified him as Solly.
These are allegations in a whistleblower disclosure, not findings by a court or a completed inspector-general investigation. In particular, the complaint’s claim that data was copied, kept on removable media, or intended for transfer is not the same as proof that any of those events occurred.
What are NUMIDENT and the Death Master File?
The alleged databases are not interchangeable, and neither description supports the shorthand claim that a thumb drive necessarily contained every American’s complete identity file.
NUMIDENT
NUMIDENT is associated with the SSA’s Numerical Identification System and Social Security number applications. WIRED reported that the system includes information such as names, birth dates, race, and other personally identifiable information. Unauthorized copying or disclosure could therefore create significant privacy and identity-fraud risks. But a person’s access to an agency system does not, by itself, prove that the person copied the entire system or any particular records.
Rank #2
- Utilizes Military Grade FIPS PUB 197 Validated Encryption Algorithm
- Super fast USB 3.0 Connection - Data transfer speeds up to 10X faster than USB 2.0
- Software Free Design - With no admin rights needed
- Sealed from Physical Attacks by Tough Epoxy Coating
- Brute Force Self Destruct Feature
The Death Master File
The Death Master File contains records concerning deceased people. Financial institutions, employers, and government agencies use it to help prevent identity fraud and determine whether a person is alive. It is sensitive and commercially relevant, but it is not synonymous with the entire SSA database or with a complete file on every living person.
The Tool Desk
Outbyte PC Repair FREEClear out junk files and repair common Windows errorsFree Scan →Outbyte Driver Updater FREEFix the driver behind crashes, sound loss and screen glitchesFind Drivers →Why Leidos is part of the scrutiny
Leidos is a major government contractor with substantial SSA-related business. WIRED reported that a contract announced in 2023 could provide Leidos up to approximately $1.5 billion in relation to SSA work. That figure is an estimated ceiling or potential value, not necessarily money already paid and not evidence that any amount was connected to Solly or the alleged conduct.
Solly’s move from SSA-related DOGE work to a senior position at Leidos creates a legitimate conflict-of-interest and data-custody question. It does not establish company involvement. The complaint allegedly described a possible intended use at a private-sector employer; it did not, on the available record, prove that Leidos directed the conduct, solicited the information, received it, or placed it on company systems.
What Solly, Leidos, and SSA say
Solly’s attorney said Solly did not share, access, or view SSA personally identifiable information, including NUMIDENT and the Death Master File. The attorney characterized the allegations as false and defamatory.
Leidos said it interviewed employees and conducted advanced digital forensics. According to WIRED, the company said its review found:
Quick wins for a faster PC:
Repair Windows errors before they cause bigger problemsFix Now →Fix the driver behind crashes, sound loss and screen glitchesFind Drivers →- No evidence that the described SSA data had been present on Leidos networks; and
- No evidence that Solly connected a thumb drive or another storage device to his Leidos laptop.
Leidos also said Solly’s current work did not overlap with his SSA work and that the company was cooperating with SSA.
Rank #3
- Slim durable design to help take your important files with you
- Vast capacities up to 6TB[1] to store your photos, videos, music, important documents and more
- Back up smarter with included device management software[2] with defense against ransomware
- Help secure your important files with password protection and hardware encryption
- 3-year limited warranty
SSA said the allegations came from a singular anonymous source and were strongly refuted. The agency said it was not aware of a compromise and that its data remained in protected environments. SSA also emphasized its digital-transformation work. That statement is important, but it is an institutional denial—not conclusive proof that no copy was ever made outside the agency’s protected systems.
The broader DOGE-SSA data controversy
The Solly allegation is part of a larger dispute over DOGE personnel’s access to and handling of SSA information, but related controversies should not be merged into one finding.
In 2025, former SSA Chief Data Officer Charles Borges separately alleged that DOGE personnel accessed or copied highly sensitive SSA information into a cloud environment without adequate security controls. The Borges disclosure concerned cloud storage and security practices, not the later allegation about a thumb drive and a move to Leidos.
Other reporting and litigation have also examined DOGE access and data sharing, including questions about privacy-law compliance. Those matters provide context for why the Solly complaint drew attention, but they do not prove that Solly copied data or that Leidos received it.
What investigations and oversight followed?
SSA inspector general
The SSA’s internal watchdog was reported to be investigating the complaint and notifying congressional committees. Federal News Network, citing The Associated Press, reported on the inquiry. The available material does not establish a final OIG finding or a criminal charge against Solly.
House Oversight
On March 9, 2026, House Oversight Democrats sent Solly a letter saying the committee was investigating alleged mishandling and abuse of SSA data. The letter requested information and described him as Leidos’s health-IT chief technology officer. Read the letter to Solly.
Rank #4
- Easily store and access 2TB to content on the go with the Seagate Portable Drive, a USB external hard drive
- Designed to work with Windows or Mac computers, this external hard drive makes backup a snap just drag and drop
- To get set up, connect the portable hard drive to a computer for automatic recognition no software required
- This USB drive provides plug and play simplicity with the included 18 inch USB 3.0 cable
- The available storage capacity may vary.
Separate letters to the SSA inspector general and SSA Commissioner Frank Bisignano asked about allegations that Solly attempted to bypass security protocols to replicate NUMIDENT data into a cloud environment and whether SSA data might remain on personal or nongovernment devices. These letters describe allegations and seek information; they are not neutral investigative findings.
Was Social Security data actually breached?
The most accurate answer depends on which claim is being tested:
| Question | What the public record supports | What remains unresolved |
|---|---|---|
| Who was the unnamed former DOGE employee? | WIRED reported that the person was John Solly. | The original Washington Post report did not publicly name him. |
| Did Solly work at SSA and later Leidos? | Reporting and a House letter support that employment history. | The precise employment record and project scope are not fully documented in the reviewed material. |
| Did Solly have access to sensitive data? | His reported SSA assignments and the surrounding complaints indicate potential access. | Access does not prove copying. |
| Did he copy data to a thumb drive? | The whistleblower complaint alleges that he did. | Solly denies it, and no public forensic proof identified in the reviewed reporting establishes that the thumb drive existed. |
| Did the data reach Leidos? | The complaint allegedly described intended use at a private-sector employer. | Solly and Leidos deny the transfer; no public proof identified in the reviewed material shows that Leidos received or uploaded the data. |
| Was there a confirmed SSA breach? | Broader DOGE access and data-handling controversies are documented. | The Solly-specific alleged breach remained unresolved in the reviewed public material. |
Accordingly, it would be inaccurate to state as fact that Solly stole Social Security data, that Leidos received the database, or that every American’s information was exposed. The defensible description is that a whistleblower complaint made those allegations, the identity of the unnamed employee was later reported as Solly, and the central claims were denied while oversight activity continued.
Why the distinction matters
Several different actions are often collapsed into the word “breach”:
- Access: being able to use an agency system.
- Copying: creating a duplicate of records.
- Exfiltration: removing the copy to an unauthorized device or location.
- Transfer: sending or uploading it to another person, company, or network.
- Intent: planning or discussing a possible transfer.
The complaint reportedly alleges several of these steps. The denials and reported Leidos forensic review dispute them. Without a final official finding, readers should not treat alleged intent as proof of a completed transfer.
Do these 3 things before closing this tab:
1Repair Windows errors before they cause bigger problems2Scan for outdated or missing drivers - takes under a minute3Clear out junk files and repair common Windows errorsQuick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
