Hermes Vector

Politics

Data leak exposes details of over 40,000 DHS employees

A data leak involving more than 40,000 U.S. Department of Homeland Security employees and contractors has been published by a transparency group.

By Hermes-Vector AI Desk

Also in: Português · Français · Deutsch

Checked against 6 sourcesdw.comnpr.orgThe Guardianwfmd.comtech-insider.orgshattered.io
Illustration for: Data leak exposes details of over 40,000 DHS employees

In brief

  • More than 40,000 DHS employees and contractors had their names, phone numbers, and email addresses leaked.
  • The data was published by Distributed Denial of Secrets in a searchable database called Icepick.
  • The leak reportedly includes information on personnel involved in undercover and surveillance operations.
  • DHS is investigating the breach and stated it is working to address the situation.

Data leak exposes details of over 40,000 DHS employees

A data leak has exposed the personal and professional details of more than 40,000 U.S. Department of Homeland Security (DHS) employees and contractors. The information was published on October 28, 2026, by the nonprofit data transparency group Distributed Denial of Secrets (DDoSecrets).

Details of the leak

The leaked data was reportedly provided to DDoSecrets by an entity calling itself the "Department of Peace." The information was organized into a searchable online database called "Icepick."

According to reports from various outlets, the exposed data includes:

  • Names
  • Job titles
  • Phone numbers
  • Email addresses
  • Workplace or office locations
  • Job assignments

Reports indicate the data includes information on personnel involved in surveillance, intelligence, and undercover operations. While some reports suggest the data includes job assignments, no outlet has reported that passwords or Social Security numbers were included in the leak.

Affected agencies

The records involve several DHS components. While exact counts vary by source, the following agencies are identified as being included in the data:

AgencyReported Record Count
U.S. Customs and Border Protection (CBP)Approximately 21,000
Immigration and Customs Enforcement (ICE)Between 6,600 and 10,000
Homeland Security Investigations (HSI)Included in ICE data
U.S. Citizenship and Immigration Services (USCIS)Approximately 6,200
Cybersecurity and Infrastructure Security Agency (CISA)Approximately 1,000

Responses and claims

DHS issued a statement saying it was "aware of a potential breach and is actively working to address the situation swiftly and effectively." The agency stated it is taking steps to "ensure all are properly protected" and will provide updates when more information is available.

An unnamed source claimed the data was obtained by subverting the DHS single sign-on system, specifically the Okta service. However, Okta stated, "Okta is secure, and we have no evidence our data or systems were compromised."

Emma Best, a co-founder of Distributed Denial of Secrets, said the leak identifies "key personnel in DHS' ever-escalating rendition and deportation programs" and that the tool would "replace anonymity with accountability."

Why it matters

This incident is the third major U.S. government data breach in recent weeks, following a claim by the hacking group ShinyHunters regarding FBI employee data and a class-action lawsuit involving a breach at the Defense Department.


Sources

This article was drafted with AI assistance and checked against the sources above. Company claims are reported as claims. Cover image is AI-generated.

Questions readers ask

What details were exposed in the data leak?
The leak exposed names, job titles, phone numbers, email addresses, workplace or office locations, and job assignments. Reports indicate the data includes personnel involved in surveillance, intelligence, and undercover operations, but no outlet has reported that passwords or Social Security numbers were included.
Who published the leaked data and when?
The nonprofit data transparency group Distributed Denial of Secrets (DDoSecrets) published the information on October 28, 2026. The data was reportedly provided to them by an entity calling itself the "Department of Peace."
Which DHS agencies were affected by the leak?
The records involve U.S. Customs and Border Protection (CBP), Immigration and Customs Enforcement (ICE), U.S. Citizenship and Immigration Services (USCIS), and the Cybersecurity and Infrastructure Security Agency (CISA). Homeland Security Investigations (HSI) is included in the ICE data.

The day's checked news, by email

One short email a day with the top stories. Free, and you can unsubscribe in one click.

Or follow for the latest news:

Advertisement

How do you feel about this story?

Comments 0

No comments yet. Start the discussion.