# US Department of Homeland Security data breach

> Developing situation record from CLSTR: https://clstr.news/situations/us-department-of-homeland-security-data-breach
> Updated: 2026-10-30T20:22:18.000Z. Sources: 112. Developments: 2.

A major data breach has exposed the professional details of more than 41,000 employees and contractors of the US Department of Homeland Security (DHS). The leaked information, published via the nonprofit Distributed Denial of Secrets (DDoSecrets), includes names, work addresses, telephone numbers, and job assignments. The dataset, organized into a searchable database named “Icepick,” reportedly contains sensitive information regarding personnel in agencies such as Immigration and Customs Enforcement (ICE) and Customs and Border Protection (CBP), including references to undercover operations and surveillance tasks.

A group calling itself the Department of Peace has claimed responsibility for the breach, alleging they obtained the data through the Okta single sign-on service. While Okta stated it has no evidence its own systems were compromised, the DHS is investigating the potential breach.

In response to the leak, the DHS, via the cybersecurity firm ZeroFox, has sought the removal of the data from hosting providers to mitigate risks of harassment, stalking, and physical harm to employees. The data was moved to the Icelandic hosting provider FlokiNET after previous domains were suspended. FlokiNET has refused to comply with takedown demands, stating that the information describes individuals in the exercise of public authority rather than their private lives. Recent reports specify that the leak impacts approximately 21,000 personnel from CBP and roughly 6,600 from ICE, alongside members of Homeland Security Investigations, the Federal Protective Service, and the Cybersecurity and Infrastructure Security Agency.

## Claims

- The leak includes information about undercover operations and surveillance tools. (reported by 42 sources)
- The leaked data includes names, phone numbers, and email addresses of employees. (reported by 41 sources)
- A database containing information on over 41,000 DHS employees was leaked. (reported by 40 sources)
- The hacker group responsible for the leak identifies as the Department of Peace. (reported by 36 sources)
- Approximately 21,000 of the leaked records belong to Customs and Border Protection (CBP). (reported by 27 sources)
- About 10,000 records are related to Immigration and Customs Enforcement (ICE). (reported by 27 sources)
- The leaked data includes employees from Immigration and Customs Enforcement and Customs and Border Protection. (reported by 23 sources)
- Distributed Denial of Secrets (DDoSecrets) first posted the database online. (reported by 17 sources)
- The data was obtained through the Okta identity management platform. (reported by 14 sources)
- Okta stated that their systems have not been compromised. (reported by 10 sources)
- The US Department of Homeland Security requested the removal of a site containing employee data. (reported by 6 sources)
- FlokiNET refused to comply with the request to remove the information. (reported by 6 sources)

## Timeline

### 2026-10-30: DHS seeks removal of leaked data on immigration agents

DHS is demanding the removal of leaked data containing personal details of thousands of ICE and CBP agents, but Icelandic hosting company FlokiNET has refused to comply with the takedown requests.

3 sources. https://clstr.news/cluster/dhs-seeks-removal-of-leaked-data-on-immigration-agents

### 2026-10-28: DHS data leak exposes identities of over 40,000 employees

A major data leak has exposed the identities and sensitive assignment details of over 40,000 U.S. Department of Homeland Security employees, including ICE and CBP agents.

110 sources. https://clstr.news/cluster/dhs-data-breach-exposes-identities-of-thousands-of-federal-agents

---
Cite as: US Department of Homeland Security data breach. CLSTR, https://clstr.news/situations/us-department-of-homeland-security-data-breach
