Well, for one, we know there were DOGE members that exfiltrated social security data for personal use [1]. And that's only what we know of so far.

[1] https://www.washingtonpost.com/politics/2026/03/10/social-se...

Also, Russian IPs accessing systems: https://www.nextgov.com/cybersecurity/2025/04/user-russian-i...