Monitor this situation.
Unsubscribe anytime.
[SITUATION] · [ACTIVE] · [TECHNOLOGY]
2 clusters · 112 sources · 3 days · First seen · Last updated
US Department of Homeland Security data breach
Overview
A major data breach has exposed the professional details of more than 41,000 employees and contractors of the US Department of Homeland Security (DHS). The leaked information, published via the nonprofit Distributed Denial of Secrets (DDoSecrets), includes names, work addresses, telephone numbers, and job assignments. The dataset, organized into a searchable database named “Icepick,” reportedly contains sensitive information regarding personnel in agencies such as Immigration and Customs Enforcement (ICE) and Customs and Border Protection (CBP), including references to undercover operations and surveillance tasks.
A group calling itself the Department of Peace has claimed responsibility for the breach, alleging they obtained the data through the Okta single sign-on service. While Okta stated it has no evidence its own systems were compromised, the DHS is investigating the potential breach.
In response to the leak, the DHS, via the cybersecurity firm ZeroFox, has sought the removal of the data from hosting providers to mitigate risks of harassment, stalking, and physical harm to employees. The data was moved to the Icelandic hosting provider FlokiNET after previous domains were suspended. FlokiNET has refused to comply with takedown demands, stating that the information describes individuals in the exercise of public authority rather than their private lives. Recent reports specify that the leak impacts approximately 21,000 personnel from CBP and roughly 6,600 from ICE, alongside members of Homeland Security Investigations, the Federal Protective Service, and the Cybersecurity and Infrastructure Security Agency.
Entities
Immigration and Customs Enforcement · Department of Homeland Security · Distributed Denial of Secrets · Customs and Border Protection · Department of Peace
Claims
What the coverage asserts, and how many sources carry each claim.
- [● 42 SOURCES] The leak includes information about undercover operations and surveillance tools. cybernoz.com · www.bbc.co.uk · hch.tv · almanartv.com.lb · www.sbctv.gr · +37 more
- [● 41 SOURCES] The leaked data includes names, phone numbers, and email addresses of employees. hch.tv · www.aftenposten.no · www.theguardian.com · sputniknews.cn · lataco.com · +36 more
- [● 40 SOURCES] A database containing information on over 41,000 DHS employees was leaked. hch.tv · cybernoz.com · www.aftenposten.no · www.theguardian.com · sputniknews.cn · +35 more
- [● 36 SOURCES] The hacker group responsible for the leak identifies as the Department of Peace. hch.tv · www.aftenposten.no · www.theguardian.com · sputniknews.cn · www.bbc.co.uk · +31 more
- [● 27 SOURCES] Approximately 21,000 of the leaked records belong to Customs and Border Protection (CBP). hch.tv · cybernoz.com · www.bbc.co.uk · www.myjoyonline.com · almanartv.com.lb · +22 more
- [● 27 SOURCES] About 10,000 records are related to Immigration and Customs Enforcement (ICE). hch.tv · cybernoz.com · almanartv.com.lb · www.sbctv.gr · 24-ore.com · +22 more
- [● 23 SOURCES] The leaked data includes employees from Immigration and Customs Enforcement and Customs and Border Protection. stvincenttribune.com · barbadosgazette.com · www.aljazeera.com · www.alrasheedmedia.com · www.caribpulse.com · +18 more
- [● 17 SOURCES] Distributed Denial of Secrets (DDoSecrets) first posted the database online. stvincenttribune.com · barbadosgazette.com · www.aljazeera.com · www.caribpulse.com · defenceredefined.com.cy · +12 more
- [● 14 SOURCES] The data was obtained through the Okta identity management platform. hch.tv · www.aftenposten.no · sputniknews.cn · lataco.com · www.sbctv.gr · +9 more
- [● 10 SOURCES] Okta stated that their systems have not been compromised. www.aftenposten.no · hch.tv · www.newsbytesapp.com · www.digi.no · www.flash.gr · +5 more
- [● 6 SOURCES] The US Department of Homeland Security requested the removal of a site containing employee data. stvincenttribune.com · barbadosgazette.com · www.aljazeera.com · haitigazette.com · diariosinsecretos.com · +1 more
- [● 6 SOURCES] FlokiNET refused to comply with the request to remove the information. stvincenttribune.com · barbadosgazette.com · www.aljazeera.com · www.caribpulse.com · haitigazette.com · +1 more
Timeline
-
[TECHNOLOGY] 3 sourcesDHS seeks removal of leaked data on immigration agents
DHS is demanding the removal of leaked data containing personal details of thousands of ICE and CBP agents, but Icelandic hosting company FlokiNET has refused to comply with the takedown requests.
-
[TECHNOLOGY] 110 sourcesDHS data leak exposes identities of over 40,000 employees
A major data leak has exposed the identities and sensitive assignment details of over 40,000 U.S. Department of Homeland Security employees, including ICE and CBP agents.
Sources
24-ore.com · abc17news.com · aljazeera.com · almanar.com.lb · almanartv.com.lb · alrasheedmedia.com · amren.com · antiguatribune.com · armees.com · au.pcmag.com · baocalitoday.com · barbadosgazette.com · begeek.fr · berita.rtm.gov.my · brasilemfolhas.com.br · breitbart.com · bug.hr · caribpulse.com · cbsnews.com · cmjornal.xl.pt · cpm.com.es · curl.haxx.se · cybernoz.com · cyberscoop.com · dagensps.se · deccanchronicle.com · decrypt.co · defenceredefined.com.cy · diariosinsecretos.com · digi.no · econoTimes.com · english.alsiasi.com · epochtimes.com · excelsior.com.mx · fakti.bg · flash.gr · forkast.news · foxnews.com · gazeta10.com · generation-nt.com · ghanaguardian.com · gigazine.net · grahamcluley.com · haitigazette.com · hch.tv · hna.de · icenews.is · in.gr
This summary has been updated 1 time: see revision history