Michael Russo

Russo holds a Bachelor of Science in Chemical Engineering from California State University Long Beach. ¹ In 1994 he co-founded a healthcare software company that he sold in 2000, after which he held CTO positions at Artromick International and Prematics Inc. ¹ He then spent over seven years as CTO of MICROS Systems, a hospitality and retail technology vendor, continuing in that role after Oracle acquired MICROS and rebranded the division as Oracle Hospitality. ¹

In 2018 Russo joined Shift4 Payments as Chief Technology Officer. ⁴ Shift4, headquartered in Pennsylvania, is a payment processing company that counts Starlink among its commercial clients — Shift4 processes Starlink's subscription payments. ⁴ Russo served as CTO through approximately early 2025, transitioning to a part-time senior technical advisor role before leaving. ⁴ Shift4's CEO during this period was Jared Isaacman, who was nominated by the Trump administration as NASA administrator in early 2025. ⁴

Russo's career was entirely in commercial payments and hospitality IT before his federal appointment. ¹ He had no prior government service on record. ¹

On January 30, 2025, Russo was appointed SSA Chief Information Officer. ¹ The appointment was made personally by Frank Bisignano, who had been nominated as SSA Commissioner and was simultaneously serving as acting head of the agency. ¹ Bisignano described a twenty-year industry friendship with Russo, both having circulated in the payments and financial technology sector. ¹ The appointment did not follow a competitive selection process or standard career-track vetting; it was a direct placement by the incoming commissioner into the agency's top technology role. Connection #3268

The network surrounding Russo's appointment creates a triangle of overlapping interests. ⁴ Bisignano, whose prior role was CEO of Fiserv, brought Russo — his CTO counterpart from the payments world — into SSA. ¹ At the same time, Russo's most recent employer, Shift4, processed payments for Starlink, a company controlled by Elon Musk, who simultaneously headed DOGE — the structure that was directing technology access operations at SSA. ⁴ Connection #3266 Shift4's CEO Jared Isaacman was nominated to run NASA in the same government. ⁴ These were not incidental overlaps; they were concurrent roles held by people with direct financial relationships to one another. ⁴

At SSA, Russo's conduct was described as 'evasive' in congressional testimony regarding DOGE access arrangements, and he was reported to have advocated for DOGE personnel to receive access to 'everything including source code.' ⁴ Witnesses characterized him as reporting operationally to DOGE rather than to SSA's acting commissioner. ⁴

The NUMIDENT is the SSA master record file. ³ It contains Social Security card application data for all Americans who have ever received a Social Security number: names, dates and places of birth, citizenship status, race and ethnicity, parents' names, and parents' Social Security numbers. ³ The database covers over 300 million living Americans, with additional records for deceased persons bringing the total SSN count to over 548 million. ³

On June 10–11, 2025, DOGE-aligned SSA CIO office staffer John Solly formally requested that a copy of the NUMIDENT production database be migrated to a private cloud environment within SSA's Amazon Web Services infrastructure. ² Career cybersecurity officials within SSA raised formal objections, and SSA's internal risk assessment determined the probability of a data breach with 'catastrophic adverse effect' at 35–65 percent. ²

On June 25, 2025 — nine days after the adverse risk assessment was issued — Russo signed the written authorization allowing Solly to proceed with the upload. ² The destination cloud environment lacked independent security controls and bypassed SSA's standard security protocols. ² A full production copy of the NUMIDENT was transferred to the unsecured AWS test environment that day. ^{3 2}

The Senate HSGAC Minority Staff Report (Peters Report, released September 26, 2025) documents this authorization chain through internal SSA records. ² The report also notes that SSA Commissioner Bisignano subsequently stated publicly that NUMIDENT data had 'not been accessed, leaked, hacked, or shared in any unauthorized fashion' — a statement that career staff and whistleblower disclosures have contradicted. ²

Aram Moghaddassi — who succeeded Russo as SSA CIO — subsequently issued a Provisional Authorization to Operate for the cloud environment on July 25, 2025, explicitly writing that the business need was higher than the security risk. ² Russo's June 25 authorization was the predicate act that enabled Moghaddassi's subsequent formal ATO. ²

The documented conflict structure involves three layers. ⁴ First, Russo was appointed to oversee SSA's technology systems by a commissioner nominee — Bisignano — who was his longtime industry peer and who selected him through a personal channel rather than institutional process. ¹ Second, Russo's prior employer, Shift4, processed payments for Starlink, the Musk company whose founder was simultaneously directing DOGE operations at SSA. ⁴ Third, Russo subsequently authorized a data transfer that DOGE personnel had requested — the same DOGE structure whose principal's company was Russo's prior business counterpart. ²

An additional layer involves the Starlink installation at GSA headquarters that occurred without authorization during the same period. ⁵ The whistleblower disclosure filed by SSA Chief Data Officer Charles Borges (August 26, 2025) noted that Russo's prior role at a Starlink payment processor created a direct conflict with any oversight responsibility for DOGE operations that included unauthorized Starlink deployments at federal facilities. ⁵

Russo is a named defendant in federal litigation arising from the NUMIDENT authorization. ⁴ The suit follows a pattern documented across the DOGE data operations: DOGE-affiliated CIOs were placed at agencies, questioned by career staff, and then authorized access that career security officials had flagged as high-risk. ⁴ The Senate HSGAC report characterized this as a deliberate institutional pattern across multiple agencies. ²

Frank Bisignano: Russo's appointment originator and a twenty-year industry acquaintance. ¹ Bisignano, formerly CEO of Fiserv, was nominated as SSA Commissioner in January 2025 and personally placed Russo as CIO on January 30. ¹ Bisignano's subsequent public statements denying unauthorized NUMIDENT access directly contradict the internal SSA risk assessment that Russo received before authorizing the transfer. Connection #3268 ²

John Solly: The DOGE-aligned CIO office staffer whose cloud upload request Russo authorized on June 25, 2025. ² Solly joined the SSA CIO office in March 2025 and filed the formal NUMIDENT cloud copy request on June 10–11. ² Russo's written authorization was the enabling action for Solly's transfer of the full production database. Connection #3243 ²

Aram Moghaddassi: Russo's successor as SSA CIO. ⁴ Moghaddassi, a Neuralink and X Corp engineer, was appointed SSA CIO after Russo stepped to special advisor status in late March 2025. ⁴ On July 25, 2025, Moghaddassi issued the Provisional ATO formalizing the cloud environment that Russo had authorized, overriding the CISO's security objections in a written memo stating business need exceeded security risk. ²

Elon Musk: Indirect relationship through two channels. ⁴ Russo's employer Shift4 processed Starlink subscription payments, creating a client-side financial relationship. ⁵ Musk's DOGE structure was the organizational home of the personnel whose data access requests Russo authorized at SSA. ² The relationship is structural rather than documented as direct personal contact. Connection #3246 Connection #3266