Hacktivists leak records on more than 41,000 DHS employees, including undercover ICE agents
The group says it took the data from an Okta single sign-on service used by DHS. Okta says its systems were not compromised.
Evidence: Independent reports. Security stories run only with a named disclosure or independent reporting behind them.
Distributed Denial of Secrets (DDoSecrets) published a dataset on October 28 containing the names, offices, contact details and assignments of more than 41,000 U.S. Department of Homeland Security employees and contractors. The dataset, called Icepick, came from a hacktivist group calling itself the Department of Peace, which gave the data to DDoSecrets and to Swiss hacker and journalist maia arson crimew. The hacktivists say they took the records from an Okta single sign-on service used by DHS. Okta told Reuters it is secure and has no evidence its data or systems were compromised. Reuters matched personal details of six employees named in the leak against other records and confirmed information by calling three of them. CyberScoop verified that many current Cybersecurity and Infrastructure Security Agency employees appear in the data, along with former leaders. DDoSecrets founder Emma Best said the data identifies officials responsible for covert and undercover operations and for deportation programs. A DHS spokesperson said the department is aware of a potential breach and is working to address it. Because the data includes undercover immigration agents, the leak could put staff at personal risk. It also raises questions about how DHS protects identity systems that many employees rely on.