Data Breach Exposes Personal Records of Over 41,000 DHS Employees

A significant data breach has compromised the personal information of more than 41,000 employees within the U.S. Department of Homeland Security (DHS), including staff at U.S. Immigration and Customs Enforcement (ICE) and Customs and Border Protection (CBP). The stolen data includes names, job titles, office locations, phone numbers, and email addresses.

Details of the Incident

According to reports from TechCrunch and Wired, the breach was allegedly executed by an individual using the handle “Department of Peace.” The hacker reportedly accessed the sensitive information through Okta, an identity and access management service utilized by the agency. The distribution of the affected records is reported as follows:

• Customs and Border Protection (CBP): Approximately 21,000 records.
• Immigration and Customs Enforcement (ICE): Nearly 7,000 records.
• Additional Agencies: Data also includes personnel from the Cybersecurity and Infrastructure Security Agency (CISA), U.S. Citizenship and Immigration Services (USCIS), and Homeland Security Investigations (HSI).

Surveillance and Disclosure

The leaked dataset, referred to as “Icepick,” allegedly contains information regarding the agencies' access to surveillance technologies, including the facial recognition application Mobile Fortify and data collection software like PenLink. The information was reportedly provided to cybersecurity researcher maia arson crimew and subsequently shared with the nonprofit organization Distributed Denial of Secrets (DDoSecrets), which is currently hosting the data.

Verification and Status

The DHS has not yet issued a formal statement regarding the breach. This incident follows a similar report from weeks prior involving stolen data from the FBI. Verification of the impact of this leak and the validity of the claims regarding access methods remains subject to ongoing investigation by the relevant authorities. Stakeholders are encouraged to monitor official DHS announcements for security updates and recommended protocols.