Technology1 min read

Over 41,000 U.S. Homeland Security officials' details apparently exposed after massive data breach

By · Published by Everything Blog

In short

The leak, claimed by a group calling itself the Department of Peace, compromised files belonging to personnel across ICE, CBP, USCIS, and headquarters. Distributed Denial of Secrets cofounder Emma Best indicated that the published files represent key figures directing agency operations rather than a complete directory. The unauthorized publication followed July 17 remarks attributed to DHS Secretary Markwayne Mullin promising escalated immigration arrests and traffic stops. While federal authorities acknowledged the incident and pledged a swift response, Okta did not immediately offer comment.

Key points

  • Hackers executed the retaliatory data exposure following DHS Secretary Markwayne Mullin's…: Hackers executed the retaliatory data exposure following DHS Secretary Markwayne Mullin's statements regarding increased immigration arrests.
  • The breach directly targets agency personnel during a period when DHS executed 980,000 de…: The breach directly targets agency personnel during a period when DHS executed 980,000 deportations over an 18-month span.
  • Federal authorities are attempting to address the security incident while third-party ser…: Federal authorities are attempting to address the security incident while third-party service provider Okta has not commented.

Sources checked by our analysis pipeline: 1

The identities of over 41,000 officials from the Department of Homeland Security have allegedly been exposed in a massive data breach by a hacktivist group calling itself the Department of Peace.

Late Wednesday stateside, the database was posted on Distributed Denial of Secrets, a nonprofit dedicated to news leaks, with claims that it was obtained from an Okta single sign-on service used by the DHS.

It appears to reveal employee names, offices, contact information and assignments, and is searchable.

Okta didn't immediately respond to a request for comment.

DDoS said that "this is not a comprehensive list of all DHS employees," quoting cofounder Emma Best saying, "Rather than an indiscriminate directory of every DHS employee, Icepick identifies many of the architects and drivers of DHS policy and operations."

DHS didn't immediately respond to a request for comment. The agency told the Washington Post that it was "aware of a potential breach" and was "working to address the situation swiftly and effectively."

The searchable database appears to include employees from Immigration and Customs Enforcement, U.S. Citizenship and Immigration Services, Customs and…

Technology