Leaked archive exposes names and contact details of more than 40,000 DHS staff
The records could help adversaries single out people working in border, immigration and cybersecurity roles, and Okta says it has no evidence its own systems were breached.
A leaked archive, published by the nonprofit DDoSecrets under the name Icepick, exposes names, job titles and work contact details for more than 40,000 Department of Homeland Security staff and contractors across DHS and its component agencies. The data was reportedly pulled from DHS's Okta login system by a hacker calling themselves Department of Peace, and the records also list internal permission groups that hint at undercover operations, wiretap programs and surveillance tools such as Palantir's Falcon and PenLink. CBP accounts make up more than half the records, followed by roughly 10,000 at ICE and nearly 1,000 at CISA, and TechCrunch confirmed part of the dataset against known employees. Okta says it knows of the report but has no evidence its systems were compromised, and DHS had not responded to requests for comment when the stories were filed. Security researchers warn the material could help adversaries target staff, and it follows earlier breaches involving FBI and Pentagon personnel data.
Why it matters
For the thousands of federal employees listed, the exposure means their names, job titles and work contact details are now in public circulation, which raises the risk of targeting or phishing. The leak also shows that login data tied to a federal workforce can be pulled from a single-sign-on system, a point that will matter to anyone who follows how government identity systems are secured. Whether the breach came from Okta itself or from elsewhere is not yet established, and the Department of Homeland Security had not responded to requests for comment when the reports were filed.
Matters or hype?
Does this story matter, or is it hype? Vote before you see what everyone else said.