He Blew the Whistle on DOGE. Then His Brakes Were Cut, The Full Story

He Blew the Whistle on DOGE. Then His Brakes Were Cut. The Full Story

A federal IT worker filed a complaint about DOGE’s data access, then went public on NPR. Shortly after Elon Musk reposted a claim calling it a lie, someone cut his brake lines. Here’s the timeline, the lawsuit, and what it means for whistleblowers in 2025.

Let me tell you a story that sounds like the opening scene of a political thriller, except it actually happened.

A quiet Easter Sunday. A suburban driveway in the Washington, D.C., area. A federal employee buckles his seatbelt to visit family. Five minutes into the drive, he presses the brake pedal at a stop sign,

And nothing happens.

His car doesn’t stop. It crashes through the intersection, off the road, into a signpost.

When he crawls out to inspect the damage, a mechanic later makes a discovery that changes everything. The brake lines had been deliberately cut. Someone had crawled under his car while it sat in his own driveway, and severed the one safety system standing between him and catastrophe.

This isn't a Netflix miniseries. This is the story of Dan Berulis, a 38-year-old IT security architect who made the mistake of telling the truth about Elon Musk‘s Department of Government Efficiency (DOGE).

The twist? That Easter Sunday wasn't a random act of violence. It happened hours after the world’s richest man, someone with 200 million followers, reposted a claim calling Berulis a liar. And now, Berulis is suing for defamation.

So let's back up. Who is this guy? What did he actually see that was so dangerous? And maybe most importantly, what does this case tell us about the price of speaking truth to power in 2025?

Grab a coffee. You're going to want to read this one to the end.

Who Is Dan Berulis, And What Did He See?

Dan Berulis wasn't looking for a fight. By all accounts, he was a career civil servant, the kind of person who quietly keeps the government’s computers running so the rest of us don't have to think about it.

At the National Labor Relations Board (NLRB), Berulis worked as a security architect. The NLRB isn‘t glamorous, but it’s important. It‘s the federal agency that investigates unfair labor practices, mediates union disputes, and protects workers’ rights to organize. The NLRB’s databases contain everything from confidential employee information to corporate trade secrets, Social Security numbers, home addresses, internal case notes, union activist lists, even proprietary business data from companies fighting labor complaints.

In other words: It's exactly the kind of database you want locked down tight.

Berulis was responsible for helping keep it that way. And in early March 2025, he started noticing things that made his stomach drop.

“They Were Inside Our Systems”, The Complaint Against DOGE

“Tenant Owner Level” Access: God Mode for Government Data

It started on March 3, 2025. A black SUV with a police escort pulled up to NLRB headquarters in Southeast Washington, D.C.. Inside were members of Elon Musk's DOGE team, the controversial Department of Government Efficiency, launched to cut federal spending and “streamline” government.

But here's the thing: The DOGE staffers didn't introduce themselves. They didn‘t explain their mission. They didn't even speak to Berulis or anyone else in IT.

Instead, they met directly with agency leadership — and demanded something alarming: “Tenant owner level” access to the NLRB‘s internal computer systems.

In plain English? That’s god mode. Unrestricted permission to read, copy, alter, or delete any data in the agency's databases. The kind of access that even Berulis, a senior security architect, didn‘t possess.

Worse, Berulis’s boss told IT staff to waive standard security protocols. No logs. No records. No oversight. “The suggestion that they use these accounts was not open to discussion,” Berulis later wrote in his whistleblower complaint.

The 10-Gigabyte Mystery

Here’s where it gets unnerving.

Berulis started monitoring network traffic, quietly, carefully, because he wasn’t supposed to be paying attention. And early in the morning on March 4, between roughly 3 a.m. and 4 a.m., he spotted something.

A massive spike in outgoing data. Approximately 10 gigabytes, the equivalent of a section of the New York Public Library, leaving the NLRB‘s network in a single burst.

But here’s the problem: The DOGE accounts had been configured to leave almost no traces of their activity. Berulis couldn‘t tell exactly which files had been taken, or where they’d gone.

He only knew one thing for sure: This wasn't normal. This wasn't authorized. And something was very, very wrong.

Then came the detail that pushed this from “concerning” to “potentially catastrophic.”

Within minutes of the DOGE team creating new user accounts, Berulis detected login attempts from an IP address in Russia, attempts that used valid credentials for one of those newly created DOGE accounts.

The attempts were blocked by geographic security policies, but they kept coming. At least 20 tries. Someone, or something, with the correct username and password, trying to get in from the other side of the world.

Berulis‘s attorney, Andrew Bakaj of Whistleblower Aid, put it bluntly: “This near real-time unlimited access by Russian actors heightens concerns to a level not previously seen and could have destroyed the agency's entire infrastructure in a matter of minutes.”

Let that sink in for a moment.

A team tied to Elon Musk, a man with significant business interests in SpaceX, Tesla, and Starlink, showed up at a federal agency, demanded unlimited access to sensitive labor data, disabled security logging, and within minutes of their arrival, someone in Russia tried to use their credentials to break in.

In Berulis‘s formal complaint to Congress, filed April 14, 2025, he laid all of this out in painstaking detail, forensic evidence, timestamps, internal documentation.

And that’s when things went from bad to terrifying.

From Whistleblower to Target

The Threatening Note With Drone Photos

Berulis didn't report this lightly. He knew the risks.

But before he could even file his formal complaint, something happened that made it clear: Someone already knew what he was doing, and they wanted him to stop.

A threatening note was taped to the front door of his apartment, an apartment he'd only moved into two months earlier and had told almost no one about.

Attached to the note? Photographs. Professional-quality images that appeared to have been taken by a drone. Images of Berulis walking his dog near his own home. Images that served as a very clear message: We know where you live. We’ve been watching you.

Think about the psychological weight of that. Your home is supposed to be your sanctuary. And suddenly, it's not.

Going Public With NPR (The Point of No Return)

Despite the threat, or perhaps because of it, Berulis decided he wasn‘t going to be silenced.

The day after filing his formal complaint with Congress, he sat down with NPR and told his story publicly. On April 15, 2025, millions of Americans heard his name for the first time.

He described the unauthorized data access. The disabled security controls. The Russian login attempts. The drone photos taped to his door.

He knew what he was doing. He was putting a target on his own back, but he believed the public had a right to know what was happening inside their own government.

He didn‘t yet know how large that target would become.

A 20-Minute Drive That Almost Ended in Tragedy

The Unthinkable Discovery at the Stop Sign

Five days after that NPR interview went live, it was Easter Sunday: April 20, 2025.

Berulis got into his car to make a last-minute drive to Maryland to visit his uncle. He took local roads instead of the major highway, a small, seemingly insignificant choice that may have saved his life.

About five minutes into the drive, he approached a stop sign and pressed the brake pedal.

Nothing happened.

He pressed harder. Still nothing. The car kept moving, picking up speed as it barreled through the intersection. Berulis had no choice but to steer off the road, directly into a signpost, to avoid colliding with cross-traffic.

When he climbed out to inspect the damage, he found something that made his blood run cold: His brake lines had been cut.

“They Were Cut While the Car Was in My Driveway”

A mechanic examined the vehicle and confirmed the horrifying truth. This wasn't a mechanical failure. It was sabotage. The brake lines had been deliberately severed, likely while the car was parked in Berulis‘s own driveway the night before.

But that wasn't all.

The Airbag Sensor That Was Tampered With

The mechanic discovered something even more chilling: The driver-side front impact/airbag sensor had also been removed. The remaining wires had been carefully spliced together, completing the circuit in a way that prevented the car‘s computer from detecting anything wrong, while also disabling the airbag entirely.

No dashboard warnings. No “limp mode” to limit speed. No emergency alerts.

The car’s safety systems had been systematically dismantled, in a way designed to look like nothing had been touched at all.

This wasn't a prank. It wasn't random vandalism. This was a meticulous, professional job intended to cause a fatal accident while leaving no obvious evidence of tampering.

And Berulis only survived because he took local roads, staying at lower speeds, instead of the highway, where a brake failure at 65 miles per hour would have been almost certainly unsurvivable.

Hours Earlier, Elon Musk Pressed “Repost”

“Filing a Deliberately False Whistleblower Claim Is a Serious Crime”

Here‘s where the timeline becomes impossible to ignore.

On the evening of April 19, 2025, the night before Berulis’s brakes were cut, Elon Musk reshared a post on X from a controversial right-wing influencer named Mario Nawfal.

Nawfal‘s post claimed that DOGE had been “cleared” of wrongdoing and suggested that Berulis should be investigated by the Department of Justice. Attached was a photo of Berulis himself.

Musk added his own comment: “Filing a deliberately false whistleblower claim is a serious crime.”

Within hours, Berulis’s brake lines were cut.

Let‘s sit with that timing for a second. The world’s richest man, with an audience of over 200 million followers, publicly labels a federal whistleblower a liar. Twelve hours later, someone disables that whistleblower‘s brakes.

The Mario Nawfal Connection

Mario Nawfal isn’t a mainstream journalist. His X account has repeatedly shared misleading claims and misinformation, including, in this case, a post that the NPR reporting had been debunked (it hadn‘t) and that the DOJ was considering investigating Berulis (there was no evidence of that).

But it didn’t matter that the claim was false. What mattered was that Musk, the owner of the platform, boosted it to every single one of his followers, effectively putting Berulis‘s face and name in front of millions of people while calling him a criminal.

Timing as Evidence: The Heart of the Defamation Lawsuit

You don‘t need to be a lawyer to see the problem here.

The defamation lawsuit Berulis filed against Musk, initially under seal and made public in June 2026, argues that Musk’s post wasn‘t just false. It was dangerous. And the timing, mere hours before someone physically tampered with Berulis’s car, isn‘t a coincidence in the lawsuit’s telling; it's the central piece of evidence.

The suit alleges that by falsely labeling Berulis a liar, Musk turned him into a target, not just for the man‘s vast online audience, but potentially for someone willing to take matters into their own hands.

Berulis’s legal team is asking a fundamental question: When you have that much influence, and you use it to attack a whistleblower with false claims, are you responsible for what happens next?

Berulis v. Musk, A Defamation Case With Unusual Stakes

Why File Under Seal?

If you‘re wondering why this lawsuit is only now coming to light, even though the brake incident happened in April 2025, the answer is unusual but important.

Berulis maintains an active security clearance that requires pre-publication review of anything related to his government work. His initial complaint was filed under seal to allow time for that clearance review.

That review is now complete. The case is public. And it’s already drawing serious attention in legal and national security circles.

The Legal Argument: Causing Direct Harm

This isn’t a typical defamation case. Most defamation lawsuits involve reputational damage, lost business, public embarrassment, maybe some emotional distress.

Berulis‘s case is different. His lawsuit alleges that Musk’s false statement didn‘t just hurt his feelings or his career, it put his life in danger.

The argument goes like this:

Musk made a false statement of fact — that Berulis filed a “deliberately false” whistleblower claim. That statement was public, emphatic, and widely disseminated.
That false statement caused direct, foreseeable harm — specifically, by painting a target on Berulis‘s back. Within hours of that statement, someone physically attacked Berulis’s car in a way that could have killed him.
Musk either knew or should have known that his words, given his platform and the existing threats against Berulis, would have this effect.

It's a novel legal theory. And it‘s one that could have major implications for how we think about the responsibility of powerful figures on social media.

What Berulis Is Asking For

The lawsuit seeks damages for defamation, emotional distress, and the physical harm Berulis suffered, plus legal fees. But reading between the lines, it's clear Berulis wants something more than money.

He wants accountability. He wants to establish, in black-letter law, that calling for someone’s destruction on a platform of 200 million followers has consequences.

And he wants to send a message: that federal whistleblowers, people who risk everything to expose wrongdoing, shouldn‘t have to fear for their lives in the process.

This Isn't Just About One Whistleblower

DOGE’s Pattern of Data Access Across the Federal Government

Here‘s the part that’s easy to miss if you only read the headlines about brake lines and lawsuits.

Berulis isn‘t alone.

Multiple whistleblowers have come forward with similar allegations about DOGE’s data access across the federal government. At the Social Security Administration, employees have reported DOGE staff copying sensitive data of hundreds of millions of Americans into cloud databases without verified security controls, a likely violation of federal privacy laws.

At the Treasury Department, a lawsuit alleges DOGE‘s data seizure constitutes “the largest data breach in American history”.

At the General Services Administration, DOGE has reportedly been developing an AI chatbot to comb through government data on servers that lack required security measures.

In other words: The NLRB wasn't a one-off. It was a template.

What DOGE’s Supreme Court Victory Meant

In June 2025, the U.S. Supreme Court stayed an injunction that had temporarily blocked DOGE‘s access to sensitive government data, essentially greenlighting the department’s data collection efforts to continue.

That decision, for critics of DOGE, was a disaster. It meant that even when lower courts recognized the potential illegality of DOGE‘s access, the highest court in the land said: Keep going.

And when the courts won’t stop it, what‘s left? Whistleblowers. People willing to say, “This is wrong, and I have proof.”

But Berulis’s case shows the cost of that courage.

The Whistleblower Protection Act, Paper Tiger or Real Shield?

The Whistleblower Protection Act (WPA) — along with the Whistleblower Protection Enhancement Act of 2012, technically protects federal employees from retaliation for protected disclosures.

Those protections include:

Protection from firing, demotion, or suspension for whistleblowing
Protection from threats, harassment, or blacklisting
Legal recourse through the Office of Special Counsel

But here’s the uncomfortable question Berulis‘s case raises: What good are those protections when the retaliation isn’t administrative, but physical?

The WPA wasn‘t designed to stop someone from cutting your brake lines. It wasn‘t designed to stop a billionaire from labeling you a criminal to 200 million people. And it certainly wasn't designed to stop drone surveillance of your morning dog walk.

Berulis’s case is exposing a gap in the law, a gap that maybe no law can fully close. Because when the most powerful people in the country decide they want to destroy you, paper protections only go so far.

The Message to Every Federal Worker Watching From Home

What This Means for Federal IT Workers

Let me tell you the part that keeps me up at night.

There are thousands of people working in federal IT right now, people who monitor network traffic, maintain security protocols, and keep our government’s data safe from foreign adversaries.

They‘re the digital frontline. And they’re watching what happened to Dan Berulis.

They‘re watching him find drone photos on his door. Watching him survive an assassination attempt by brake sabotage. Watching him get dragged through a defamation suit while the world’s richest man calls him a liar.

And they're asking themselves: Is speaking up worth it?

That‘s the chilling effect. It’s not about whether the law technically protects you. It’s about whether you’re willing to bet your life, and your family‘s safety, on that protection.

The Future of Whistleblowing in America

Whistleblowers are essential to democracy. They’re the reason we found out about the Pentagon Papers. The reason we learned about the NSA‘s warrantless surveillance. The reason we discovered government contractors bilking taxpayers for billions.

But every system depends on people willing to step forward. And when stepping forward carries this kind of risk, drone surveillance, physical sabotage, public attacks from the most powerful people on the planet, the well of courage will eventually run dry.

Berulis’s case isn‘t just about one man‘s lawsuit. It’s a stress test of whether the American whistleblowing system, and the federal workforce that depends on it, can survive the new reality of 2025.

What Happens Next, And How to Stay Informed

The defamation lawsuit is now public. Court filings are accessible. And the legal process, slow, deliberate, and often opaque, is just getting started.

Here's what to watch for in the coming months:

Ongoing Investigations:

The House Oversight Committee has demanded investigations into DOGE‘s activities at the NLRB
The Social Security Administration‘s inspector general is probing separate DOGE-related whistleblower complaints
The Government Accountability Office (GAO) released a limited report in April 2026, but key questions remain unanswered

How to Follow the Case:

Court records: The full docket for Berulis v. Musk is available via CourtListener
Whistleblower Aid: The nonprofit representing Berulis provides regular updates
NPR & WIRED: Both outlets continue to cover new developments

Look, here‘s the honest truth: I don’t know how this case ends. Neither does anyone else. The legal theories are novel. The facts are contested. And the power dynamics are so lopsided it makes you want to scream.

But here‘s what I do know.

Dan Berulis was doing his job. He saw something that looked wrong, really wrong, and he said something. He raised his hand and said, “This doesn't add up.”

And for that, someone threatened him. Someone surveilled him. Someone cut the brakes on his car while his family slept nearby.

That is not how a functioning democracy treats its truth-tellers. That‘s how a mafia treats a rat.

So whether you care about government transparency, data privacy, Elon Musk, labor rights, or just the simple question of what happens when regular people try to hold powerful people accountable, pay attention to this case.

Because the answer matters. For Berulis. For every federal employee watching from the shadows.

And for all of us.

If you found this reporting valuable, consider sharing this article or following for updates on the Berulis v. Musk case. Whistleblowers risk everything to tell the truth, the least we can do is pay attention when they speak.

Collectivescape

Search This Blog