A federal watchdog found that the Department of Homeland Security's inspector general took more than three years to investigate most whistleblower retaliation complaints, and that DHS secretaries blew past a legally required 30-day deadline to act on every single substantiated case.
The Government Accountability Office examined 73 whistleblower retaliation cases that the DHS Office of Inspector General opened and closed between fiscal years 2018 and 2025. Of those 73, the OIG took longer than three years to investigate 39, a clear majority. The agency's own policy calls for "timely review," but the GAO found the OIG never defined that standard in specific, measurable terms, never evaluated its own timeliness, and built no mechanism to hold investigators accountable for delays.
Just the News reported on the GAO's findings, which paint a picture of an oversight office that treated speed as an afterthought while the federal employees it was supposed to protect waited years for answers. The GAO concluded bluntly that "timeliness is a problem."
Out of the 73 cases, the OIG substantiated 11. Federal law requires the DHS Secretary to decide whether to take corrective action within 30 days of receiving the inspector general's report on a substantiated case. No Secretary of Homeland Security met that deadline on any of the 11 cases, not one.
As of May 2026, the Secretary had decided to take corrective action in five of the 11 cases. The remaining six sat without a decision. Across all 11, whistleblowers waited between four months and more than two years just for the Secretary's office to weigh in.
DHS officials offered a striking explanation for the bottleneck: they told the GAO there is no process and no designated official responsible for making sure these cases get reviewed on time. The department built no workflow, assigned no person, and set no internal clock to track whether a legally mandated deadline was being met.
The GAO spelled out the consequences in plain terms:
"Until the Secretary decides on corrective action for the six pending cases and takes steps to ensure timely decisions on future substantiated cases, whistleblowers with substantiated cases will not receive timely restorative personnel actions."
OIG officials told the GAO that case complexity and limited staff affected how long investigations took. They said the office had "focused more on investigation quality and thoroughness than timeliness." That framing treats speed and accuracy as trade-offs, but the GAO's findings suggest the OIG never tested whether the trade-off was real, because it never tracked timeliness at all.
The watchdog's policy requires timely review of retaliation complaints. But the OIG never defined "timely" in specific terms, never ran an internal evaluation of how long cases were taking, and never put any other accountability tool in place. A policy that demands promptness without measuring it is a policy that demands nothing.
GAO warned that the delays carry real costs beyond bureaucratic inefficiency:
"Improving timeliness could lessen the personal, financial, and professional hardships on complainants and help convey that protecting whistleblowers is a priority."
The report also flagged a broader institutional risk. Whistleblowers who see colleagues wait years for resolution, and then watch the Secretary's office sit on proven cases, may decide the system is not worth the trouble.
"This could decrease confidence in DHS whistleblower protections and discourage other whistleblowers from coming forward."
The GAO report lands against a backdrop of recurring questions about how DHS handles internal dissent. In 2020, a DHS whistleblower named Brian Murphy alleged that acting DHS Secretary Chad Wolf pressured him to downplay intelligence about threats from Russia and white supremacists. Wolf denied the claims at a Senate confirmation hearing, calling them "patently false" and "a fabrication, completely," AP News reported. Wolf also acknowledged placing a hold on an intelligence bulletin about Russian disinformation targeting Joe Biden, saying it needed additional context before release.
At that same hearing, Sen. Gary Peters pushed back on any suggestion that politics should shape intelligence work:
"Rhetoric and political ideology cannot drive intelligence reports and it should not predetermine the actions of any federal department."
The Washington Examiner reported that Wolf's confirmation hearing before the Senate Homeland Security and Governmental Affairs Committee also raised separate misconduct allegations at DHS, including questions about reports of unnecessary medical procedures performed on women held in ICE custody. The GAO itself found during that period that neither Wolf nor his deputy, Ken Cuccinelli, were legally authorized to hold their positions due to a violation of the order of succession, a finding that underscored broader governance failures at the department.
Several questions remain unanswered. The GAO report does not name the specific Secretaries of Homeland Security who failed to meet the 30-day deadline, nor does it identify the federal statute that establishes that requirement. The nature of the retaliation alleged in the 73 cases, what the whistleblowers reported and what happened to them afterward, is not detailed. And the corrective actions taken in the five resolved cases remain unspecified.
What the report does make clear is structural. DHS has no designated person responsible for tracking whether the Secretary acts on substantiated cases. The OIG has no measurable definition of timely. And the whistleblowers caught in between, the people who reported wrongdoing and were punished for it, absorbed years of personal, financial, and professional cost while the bureaucracy ground forward at its own pace.
Thirty-nine of 73 cases took more than three years. Eleven were proven, and none got a decision on time. Six still had no decision as of May 2026. Those are not edge cases or one-off failures. They are the system working exactly as it was built, which is to say, without anyone watching the clock.
A government that tells its employees to speak up and then takes years to protect them when they do has not built a whistleblower system. It has built a warning to stay quiet.
