Sensitive Data Mishandling Spans Trump and Biden Eras: GSA Audit Uncovers Lapses

In a revealing development, government officials from both the Trump and Biden administrations have come under scrutiny after sensitive but mostly unclassified documents were improperly uploaded to a publicly accessible Google Drive folder. Initially reported by The Washington Post and later confirmed by Axios, this incident has spotlighted a systemic pattern of negligence in the handling of sensitive government data.

The revelation emerged as part of an ongoing audit by the General Services Administration’s (GSA) Office of Inspector General. The uploaded files included White House floor plans, proposals for security enhancements, and even vendor banking details. While these documents were largely labeled as Controlled Unclassified Information (CUI)—a designation meant for sensitive materials not meeting the threshold for full classification—the fact they were available to all GSA employees raises major concerns about operational security and protocol compliance.

Notably, this incident echoes past controversies involving both administrations. A special counsel’s report in 2023 found that President Biden had stored classified documents at his Delaware home but was not charged. In contrast, former President Donald Trump faced criminal charges for storing classified documents at Mar-a-Lago, a case dismissed due to procedural issues with the special counsel’s appointment.

Despite repeated controversies, including the more recent “Signalgate” scandal, Trump has largely avoided long-term political fallout. Meanwhile, the Biden administration is now also entangled in questions about secure data management. The GSA, White House, and Biden representatives have yet to comment on the findings.

Key Points Uncovered

Incident Details: Government officials uploaded confidential documents to a Google Drive folder accessible to all GSA employees.
When It Happened: The data uploads occurred during Biden’s presidency, but included materials from Trump’s second administration.
Types of Documents: Included were floor plans of the White House, proposed blast door specifications, and vendor bank account details.
Document Classification: Nine of the 15 files were marked as CUI—Controlled Unclassified Information.
Security Oversight: The use of incorrect sharing settings on Google Workspace allowed unintended access.
Audit Revelation: The GSA Office of Inspector General discovered the issue during a routine audit.
Scope of Access: Files were accessible to all employees within the GSA due to lax permission settings.
Classification Status: While most files were unclassified, it remains uncertain if any were classified.
Historical Context: Biden previously had classified documents at his home, but no charges followed.
Trump Case Dismissed: Trump faced criminal charges over documents at Mar-a-Lago, which were later dismissed on legal grounds.
Repetition of Mistakes: The incident suggests ongoing systemic failures across multiple administrations.
Lack of Response: No immediate comment from the GSA, Biden officials, or the White House.
SignalGate Echo: Trump minimized a related scandal as a “glitch,” reflecting a dismissive stance on data security.
Political Fallout: Despite ongoing controversies, Trump continues to evade significant political consequences.
Transparency Lacking: The government has yet to provide full accountability for these recurring lapses.

What Undercode Say:

This unfolding scandal underlines a deeper, more troubling issue within the U.S. government’s data management infrastructure: a bipartisan culture of carelessness when it comes to handling sensitive—but not necessarily classified—information.

Let’s be clear. This isn’t about espionage, leaks, or classified briefings ending up in foreign hands. But the casual mishandling of Controlled Unclassified Information (CUI), such as building schematics and vendor financial data, exposes vulnerabilities that adversaries could exploit. It’s like leaving your doors locked but your windows wide open.

That these uploads occurred during Biden’s presidency but involved Trump-era documents only underscores the continuity of weak oversight. It’s not a partisan issue—it’s a protocol issue. And it speaks to an institutional failure in training, auditing, and enforcing security procedures within federal agencies like the GSA.

The use of commercial cloud platforms such as Google Drive by government workers isn’t inherently problematic—but it becomes a massive red flag when those platforms are misconfigured. Publicly accessible folders holding architectural layouts of the White House and details of blast door proposals? That’s not just a technical mistake; that’s a breach of national security planning.

The fact that nine of these files were labeled CUI should’ve been a signal for extra caution. CUI isn’t top-secret, but it’s still protected for a reason. A small leak here, a misplaced document there, and suddenly the blueprint for breaching high-security areas is no longer secure.

There’s also the glaring issue of accountability. Biden’s team hasn’t responded. Trump, meanwhile, continues to downplay every controversy, branding the latest as nothing more than a glitch. And so far, the political and legal repercussions have been negligible—Trump’s Mar-a-Lago case was thrown out on procedural grounds, and Biden escaped charges altogether.

This recurring indifference suggests that data security isn’t just underfunded—it’s undervalued. The federal government urgently needs a unified, bipartisan approach to digital hygiene and information management. This means stricter audits, more frequent internal reviews, real consequences for protocol violations, and mandatory cybersecurity training for all personnel handling sensitive data.

Until then, both adversaries and watchdogs alike will continue to find embarrassing—and potentially dangerous—cracks in the system.