started · updated
DHS data leak exposes identities of over 40,000 employees
A massive data leak has exposed the personal and professional details of more than 40,000 employees and contractors of the U.S. Department of Homeland Security (DHS). The information, published via a searchable database named Icepick, includes names, work addresses, telephone numbers, and email addresses.
The leaked records specifically impact several agencies, including approximately 21,000 personnel from Customs and Border Protection (CBP) and roughly 6,600 from Immigration and Customs Enforcement (ICE). Other affected groups include Homeland Security Investigations, the Federal Protective Service, and the Cybersecurity and Infrastructure Security Agency. The data reportedly contains sensitive details regarding undercover operations, surveillance assignments, and internal access groups.
A group calling itself the Department of Peace claimed responsibility for the breach, alleging they obtained the information through Okta, a single sign-on service used by the department. While Okta stated it has no evidence its own systems were compromised, the transparency nonprofit Distributed Denial of Secrets (DDoSecrets) published the archive to promote accountability.
DHS is currently investigating the potential breach and working to protect affected personnel. In response to the leak, the department, via the cybersecurity firm ZeroFox, requested that the Icelandic hosting provider FlokiNET remove the information, citing risks of harassment and physical harm to employees. FlokiNET declined the request, though the original domain was subsequently suspended by its registrar.
Entities
Customs and Border Protection · Department of Homeland Security · Department of Peace · Distributed Denial of Secrets · Emma Best · Immigration and Customs Enforcement · OKTA · U.S. Department of Homeland Security · maia arson crimew
Claims
What the coverage asserts, and how many sources carry each claim.
- [● 27 SOURCES] About 10,000 records are related to Immigration and Customs Enforcement (ICE). hch.tv · almanartv.com.lb · 24-ore.com · www.aftenposten.no · www.theguardian.com · +19 more
- [● 27 SOURCES] Approximately 21,000 of the leaked records belong to Customs and Border Protection (CBP). hch.tv · www.bbc.co.uk · www.myjoyonline.com · almanartv.com.lb · 24-ore.com · +19 more
- [● 40 SOURCES] A database containing information on over 41,000 DHS employees was leaked. hch.tv · www.aftenposten.no · www.theguardian.com · sputniknews.cn · lataco.com · +34 more
- [● 14 SOURCES] The data was obtained through the Okta identity management platform. hch.tv · www.aftenposten.no · sputniknews.cn · lataco.com · world-today-journal.com · +7 more
- [● 41 SOURCES] The leaked data includes names, phone numbers, and email addresses of employees. hch.tv · www.aftenposten.no · www.theguardian.com · sputniknews.cn · lataco.com · +35 more
- [● 10 SOURCES] Okta stated that their systems have not been compromised. www.aftenposten.no · hch.tv · www.newsbytesapp.com · www.digi.no · www.flash.gr · +5 more
- [● 36 SOURCES] The hacker group responsible for the leak identifies as the Department of Peace. hch.tv · www.aftenposten.no · www.theguardian.com · sputniknews.cn · www.bbc.co.uk · +31 more
- [● 42 SOURCES] The leak includes information about undercover operations and surveillance tools. www.bbc.co.uk · hch.tv · almanartv.com.lb · 24-ore.com · www.aftenposten.no · +36 more
- [● 5 SOURCES] The cybersecurity firm ZeroFox acted on behalf of the Department of Homeland Security. stvincenttribune.com · barbadosgazette.com · haitigazette.com · trinidadtribune.com
- [● 17 SOURCES] Distributed Denial of Secrets (DDoSecrets) first posted the database online. stvincenttribune.com · barbadosgazette.com · www.caribpulse.com · defenceredefined.com.cy · diariosinsecretos.com · +11 more
- [● 5 SOURCES] The domain icepi.cx was suspended by its registrar. stvincenttribune.com · barbadosgazette.com · haitigazette.com · trinidadtribune.com
- [● 23 SOURCES] The leaked data includes employees from Immigration and Customs Enforcement and Customs and Border Protection. stvincenttribune.com · barbadosgazette.com · www.alrasheedmedia.com · www.caribpulse.com · defenceredefined.com.cy · +17 more