[REVISION HISTORY]

US Department of Homeland Security data breach

1 recorded revision of this situation.

What changed

2026-10-31 04:21 UTC → 2026-10-31 04:46 UTC · added ~~removed~~

A major data breach has exposed the professional details of more than 41,000 employees and contractors of the US Department of Homeland Security (DHS). The leaked information, published via the nonprofit Distributed Denial of Secrets (DDoSecrets), includes names, work addresses, telephone numbers, and job assignments. The dataset, organized into a searchable database named “Icepick,” reportedly contains sensitive information regarding personnel in agencies such as Immigration and Customs Enforcement (ICE) and Customs and Border Protection (CBP), including references to undercover operations and surveillance tasks. A group calling itself the Department of Peace has claimed responsibility for the breach, alleging they obtained the data through the Okta single sign-on service. While Okta stated it has no evidence its own systems were compromised, the DHS is investigating the potential breach. In response to the leak, the DHS, via the cybersecurity firm ZeroFox, has sought the removal of the data from hosting providers to mitigate risks of harassment, stalking, and physical harm to employees. The data was moved to the Icelandic hosting provider FlokiNET after previous domains were suspended. FlokiNET has refused to comply with takedown demands, stating that the information describes individuals in the exercise of public authority rather than their private lives. Recent reports specify that the leak impacts approximately 21,000 personnel from CBP and roughly 6,600 from ICE, alongside members of Homeland Security Investigations, the Federal Protective Service, and the Cybersecurity and Infrastructure Security Agency.

Versions

Select a version to see what changed compared to the one before it.