A hacker stole more than 40,000 DHS employee records

Your DHS employee data, including your name and contact information, is now publicly available through a data leak.

A hacker has stolen over 41,000 personal records from the Department of Homeland Security (DHS), including data on employees from US Immigration and Customs Enforcement (ICE) and Customs and Border Protection (CBP). The exposed information includes names, job titles, phone numbers, email addresses, and office locations. The breach reportedly occurred through Okta, an identity and access management service used by DHS. The hacker, known as “Department of Peace,” claimed responsibility and stated their motive was retaliation. This incident follows a similar data theft from the FBI. The leaked data, dubbed the “Icepick” dataset, was shared with researcher maia arson crimew and is now hosted by Distributed Denial of Secrets (DDoSecrets). Additionally, the leak includes details about DHS units with access to surveillance tools like Mobile Fortify and PenLink.

This breach highlights significant vulnerabilities in the identity and access management systems of critical government agencies, even those handling sensitive national security information. The use of Okta as an entry point suggests a potential systemic issue rather than an isolated incident, signaling a need for enhanced security protocols and third-party vendor risk management across the federal government. The inclusion of details on surveillance tools further complicates the implications, potentially exposing operational methods and personnel involved in sensitive activities.

The motivation behind the leak, framed as a retaliatory act, underscores the growing trend of hacktivism targeting government entities and the increasing willingness of threat actors to expose employee data and operational details. This incident could lead to heightened scrutiny of government cybersecurity practices and potentially influence future policies regarding data protection and employee privacy within federal agencies. The public availability of this data may also pose risks to ongoing investigations or operations involving DHS personnel.