Massive Leak Exposes 41,000 DHS Workers and ICE Agents
An archive containing personnel records, internal system structures, and surveillance program references for tens of thousands of Department of Homeland Security workers has been published online.
Radwan AbdulhadiEditor and technology writer
An Unprecedented Breach of Homeland Security Records
An unprecedented data breach has exposed personal details and internal system information for more than 41,000 employees and contractors working across the Department of Homeland Security and its constituent agencies. The leaked records—which include email addresses, office locations, phone numbers, and references to surveillance systems—were published online by the transparency nonprofit [Distributed Denial of Secrets](https://en.wikipedia.org/wiki/Distributed_Denial_of_Secrets).
The archive, distributed under the project name "Icepick," was obtained from a hacker group calling itself the Department of Peace. According to notes left with the files, the actors claimed the breach was justified because the agency maintains extensive data on citizens. The records were last updated on August 19, 2026, and cover approximately a seventh to a fifth of the total workforce across the federal department.
Breakdown of Affected Agencies and Personnel
An analysis of the leaked data reveals that staff members from U.S. Customs and Border Protection account for more than half of the entries, spanning personnel stationed at airports and other ports of entry. Another substantial portion belongs to Immigration and Customs Enforcement, including thousands tied to Homeland Security Investigations.
Additional records cover employees from U.S. Citizenship and Immigration Services, the Federal Protective Service, and the Cybersecurity and Infrastructure Security Agency. The database also encompasses senior department officials, regional field operatives, and various detention contractors, providing a detailed structural map of the federal organization.
Okta Authentication and System Access Mapping
The hacker group stated that the information was gathered from an Okta login system utilized by the department for central network authentication. A spokesperson for Okta responded that the company is aware of the reports, stating that its systems are secure and that there is no evidence of a direct compromise of its infrastructure.
Beyond basic contact details, the leaked files detail user group memberships linked to Active Directory permissions. These groups illustrate how employees access internal software, third-party vendor platforms, and specialized investigative tools utilized by federal immigration and law enforcement divisions.
Exposure of Undercover and Surveillance Programs
The leaked database includes references to permission groups associated with certified undercover operations, wiretap programs, and data interception systems. Entries reference tools like Palantir's investigative platform, facial-recognition apps such as Mobile Fortify, and communications analysis software like [Penlink](https://techcrunch.com/2026/01/26/heres-the-tech-powering-ices-deportation-crackdown/).
Security analysts evaluating the dataset note that the exposure of these internal permission structures and program affiliations could pose significant intelligence risks. Experts warn that threat actors or adversaries could potentially leverage the information to analyze organizational relationships or target vulnerable personnel.
Broader Government Security Incidents
This security incident follows several other high-profile data breaches impacting U.S. federal agencies in recent months. Earlier breaches involved the compromise of personnel directories and records from the Federal Bureau of Investigation as well as human resources units within the Department of Defense.
Researchers and public information advocates suggest that while the breach introduces operational security concerns for the agency, the directory information may also facilitate public records research and oversight efforts regarding federal immigration policies.
Sources
- WIREDMassive Leak Exposes 41,000 Homeland Security Workers—Including Undercover ICE Agents
- TechCrunchHacker stole personnel data about thousands of Homeland Security employees, including CBP and ICE agents
Continue chronologically
Related stories
Hackers Leak Data of 41,000 Homeland Security Workers
A hacktivist group leaked records of over 41,000 Homeland Security personnel, including ICE and border police details, via an Okta breach.
Hacker Steals Records of Over 41,000 DHS Employees
A massive security breach compromises personal data and surveillance tool links for more than 41,000 Department of Homeland Security workers.
Bluesky Blocks Links to Leaked DHS Personnel Data
Social network Bluesky blocks links to a leaked archive of Department of Homeland Security employee records, citing policy violations.
ICE Uses Palantir Database to Track Protesters, Files Reveal
Newly unsealed court documents reveal that ICE and DHS agents are allegedly utilizing a Palantir database to build dossiers on protesters and observers.
