Senators press nominees on use of Signal and contractor access to federal data after OPM breach reports

Senators from both parties pressed Scott Cooper and Eric Ueland on data security practices, the use of commercial messaging apps for government business and reports that contractors have had access to sensitive federal personnel and health data.

Why it matters: OPM maintains personnel records for millions of federal employees and applicants. Past OPM breaches have exposed personally identifiable information; committee members said recent reports about contractors’ access raise fresh oversight and privacy questions that could affect national security and veterans’ benefits.

Multiple senators cited recent reporting and events: Senator Hassan said it was “imperative that a thorough, transparent investigation be conducted” into the National Security Advisor’s use of a commercial messaging app to discuss an operational military action, arguing that such use risks exposing timetables and plans to adversaries. Senator Gallego and others repeated calls for a committee hearing focused on the practice.

Senators also raised reports that a private firm contracted to provide tools or services—referred to in testimony as “Doge”—had accessed or handled OPM and other agencies’ data. Senator Slotkin and others asked nominees whether they would protect personnel and taxpayer information from contractors and from improper cross‑agency access.

Nominees’ responses: Scott Cooper said protecting data privacy is “incredibly important” and that he would ensure appropriate mechanisms are in place for investigation and protection. Eric Ueland said he would “make sure that we protect data bridal [privacy] and make sure that people who are not authorized to have access to systems will not have that access” if confirmed.

Committee direction: Senators asked for additional oversight, including a dedicated hearing on the use of Signal and similar commercial apps for official business. Several senators requested commitments that inspector general offices and other oversight entities be allowed to investigate without interference; Cooper and Ueland pledged to comply with applicable laws and to support lawful investigations.

Clarifying details offered in the hearing: witnesses and senators referenced the decade‑earlier OPM breach, described as exposing sensitive records; senators said current reports involve “hundreds of thousands” of records and questioned contractor practices and storage arrangements. Nominees did not make binding operational promises before confirmation but said they would prioritize privacy and review access controls.