Technology2 min read

Details of thousands of US immigration agents leaked online

By · Published by Everything Blog

In short

The published database, dubbed Icepick, contains names, workplace addresses, phone numbers, and job descriptions for more than 41,000 Department of Homeland Security personnel. Activist group Department of Peace and researcher maia crimew distributed the files through Distributed Denial of Secrets, citing a desire to expose staff linked to deportations and leak investigations. While the publishers claimed they retrieved the files via single sign-on provider Okta, an Okta representative stated the firm found no evidence of a compromise within its own systems. The release marks the third significant breach or cyber incident aimed at United States government agencies in recent weeks.

Key points

  • Federal law enforcement and immigration personnel face heightened public exposure followi…: Federal law enforcement and immigration personnel face heightened public exposure following the release of thousands of internal work profiles.
  • Transparency activists are deliberately targeting federal databases to identify individua…: Transparency activists are deliberately targeting federal databases to identify individual personnel involved in covert programs and deportations.
  • United States government agencies are experiencing a wave of cyber incidents, following r…: United States government agencies are experiencing a wave of cyber incidents, following recent breaches at the Federal Bureau of Investigation and the Federal Election Commission.

Sources checked by our analysis pipeline: 1

- Published

Details of more than 41,000 personnel working for the US Department of Homeland Security (DHS), including thousands involved in immigration enforcement, have been leaked to the public.

The leak includes names, work addresses, and phone numbers of DHS staff, including agents working with Immigration and Customs Enforcement and Customs and Border Protection, along with descriptions of the work that they do for each agency.

Wednesday's leak marks the third time in recent weeks that a government agency has been targeted in leaks or hacks.

A representative of the DHS did not immediately respond to a request for comment.

The seemingly unprecedented breach of employee information was put online on Wednesday by a group called the Department of Peace alongside cybersecurity researcher and hacker maia crimew.

The information was put in a database named Icepick and shared through a website hosted by Distributed Denial of Secrets.

The groups wrote in an online statement that the goal of the leak was not meant to be a directory of every DHS agent. Rather the aim was to replace "anonymity with accountability", according to Emma Best, a co founder of DDoSecrets.

"The leak is extraordinary but deceptive in it's simplicity as it identifies the officials responsible for overseeing covert and undercover operations, the government's hunt for leakers and the failed BlueLeaks investigation - along with key personnel in DHS's ever-escalating rendition and deportation programs," Best added.

The Department of Peace said on Wednesday that it accessed the DHS agent profiles through a single sign-on service called Okta.

Okta is a popular online security tool that organisations use to ensure that only people with access to internal platforms are logging on to them.

A spokeswoman for Okta said the company is aware of the claims being made, but said: "Okta is secure, and we have no evidence our data or systems were compromised."

Last month, the FBI was hacked with a group called ShinyHunters taking personal information about thousands of agents.

In recent days, the Federal Election Commission, which makes public political campaign donation data, was taken offline because of a suspected hacking attempt.

Original source: www.bbc.co.uk

Technology

More in Technology