MikhbarMIKHBAR
Artificial Intelligence

Hackers Leak Data of 41,000 Homeland Security Workers

A hacktivist group has stolen and leaked the information of more than 41,000 Homeland Security personnel, exposing contact details and sensitive information about undercover programs.

Hackers Leak Data of 41,000 Homeland Security Workers

Massive Data Breach Exposes DHS Personnel

A hacktivist group has stolen records for more than 41,000 Homeland Security personnel and released them on the web with outside help, as reported by outlets like <a href="https://www.wired.com/story/massive-leak-exposes-41000-homeland-security-workers-including-undercover-ice-agents/">Wired</a>, the Washington Post, and NPR. The leak exposes email addresses, phone numbers, and office addresses, alongside sensitive information regarding the agency's undercover and surveillance programs.

According to reporting by <a href="https://www.washingtonpost.com/immigration/2026/10/28/ice-cbp-other-dhs-officer-identities-posted-online-data-breach/">Washington Post</a>, the compromised database represents roughly a seventh of the entire Homeland Security workforce. The exposed personnel include 21,000 individuals working with U.S. Customs and Border Protection and 10,000 records belonging to Immigration and Customs Enforcement (ICE) personnel. Furthermore, a third of those ICE-related records connect directly to the Homeland Security Investigations unit, which functions as the criminal investigative arm of the agency.

Motivations Behind the Hacktivist Operation

The hacktivist collective calling itself the Department of Peace issued a statement claiming responsibility and tying the breach to recent government statements. "On July 17th, Markwayne Mullin said he was 'turning up the heat.' This is what happens to ICE when you do that," the group declared.

The reference points to comments made by the DHS Secretary <a href="https://www.forbes.com/sites/saradorn/2026/07/17/ice-is-turning-up-the-heat-on-the-streets-despite-recent-killings-dhs-secretary-says/">during a press conference</a>. When asked about holding agents accountable for use of force policy violations following fatal shootings in Houston and Maine, the secretary stated that the agency was "turning up the heat on the streets." The hackers wrote in a note alongside the stolen records, "They have our information, so it's only fair that we have theirs."

The Compromise Vector and Okta's Response

The hackers apparently stole the sensitive information via Okta, the single sign-on service utilized by the Department of Homeland Security. Okta enables users to sign in just once with their credentials to gain full access to backend systems, cloud services, and mobile applications.

Despite the exploitation of the single sign-on mechanism, Okta informed <a href="https://www.wired.com/story/massive-leak-exposes-41000-homeland-security-workers-including-undercover-ice-agents/">Wired</a> that it has found no evidence indicating its own data or core systems were compromised during the incident.

Homeland security website
Image related to the report from Engadget · Source: Engadget

Publicly Shared Searchable Database Created

After securing the data, the perpetrators shared it with transparency nonprofit Distributed Denial of Secrets and a Swiss cybersecurity researcher known as maia arson crimew. Together, they built a searchable online database utilizing the information provided by the Department of Peace.

Distributed Denial of Secrets named the resulting public database "Icepick." Emma Best, the founder of the organization, stated that the records reveal connections between officials tasked with overseeing covert and undercover operations, alongside key personnel involved in the agency's escalating rendition and deportation programs.

Official Response from Homeland Security

As reported by <a href="https://www.npr.org/2026/10/28/nx-s1-6021497/dhs-hack-ice/">NPR</a>, a spokesperson for Homeland Security acknowledged that the agency is aware of the potential data breach and is actively working to resolve the issue swiftly and effectively.

The spokesperson added, "We take all security threats against our employees and officers seriously and will work to ensure all are properly protected. We will update the public when more information is available."

Sources

  • EngadgetHackers leaked details of more than 41,000 Homeland Security personnel

Continue chronologically