Source?
Oh come on, search-engines have gone downhill, but not that far downhill! You already know it involves "DOGE" and "Russia" and "credentials", that ought to be enough:
> Berulis alleged in the affidavit that there attempted logins to NLRB systems from an IP address in Russia in the days after DOGE accessed the systems. He told Reuters Tuesday that the attempted logins apparently included correct username and password combinations but were rejected by location-related conditional access policies.
* https://www.reuters.com/technology/cybersecurity/whistleblow...
* https://www.npr.org/2025/04/15/nx-s1-5355896/doge-nlrb-elon-...
> Daniel J. Berulis, a cybersecurity architect with the NLRB, filed a whistleblower complaint alleging that within 15 minutes of DOGE team members creating new user credentials and demanding administrative access, multiple login attempts using those exact credentials originated from a Russian IP address
https://www.npr.org/2025/04/15/nx-s1-5355896/doge-nlrb-elon-...