Hacker stole personnel data about thousands of Homeland Security employees, including CBP and ICE agents

Your government employee email and phone number are now public, which can be used for targeted phishing or FOIA requests.

Personal information for over 40,000 U.S. Department of Homeland Security employees, including agents from CBP and ICE, has been leaked online. The data breach, which occurred earlier this year, includes names, job titles, and work contact details like email addresses, phone numbers, and office locations. A hacker known as 'Department of Peace' claimed responsibility, stating the data was accessed through an Okta single sign-on system used by Homeland Security. This breach follows similar leaks affecting the FBI and Pentagon personnel records, and is the second related to Homeland Security this year, with the same hacker previously claiming to have stolen department contracts. The leaked dataset, verified by TechCrunch, was provided to journalist maia arson crimew and subsequently shared with DDoSecrets for public access. The timing of the breach, around mid-August, and the scale—approximately one-fifth of DHS's workforce—raise concerns about the security of government IT systems and the potential for misuse of the exposed information.

The breach highlights critical vulnerabilities in government identity and access management systems, particularly the reliance on single sign-on solutions like Okta. The fact that personnel data, including access permissions and details of system usage, was compromised suggests a broader risk to sensitive government operations and data security. This incident will likely prompt heightened scrutiny of how federal agencies manage their digital identities and secure contractor access, potentially leading to more stringent security protocols and audits across the board.

The exposed data offers unprecedented insight into the technologies and internal systems utilized by Homeland Security personnel, including potential access to surveillance tools and advanced analytics platforms. This transparency, though resulting from a security failure, may empower transparency advocates and researchers to scrutinize government activities and potential abuses of power. Furthermore, the detailed user group information could reveal patterns of access and tool usage by specific agencies, potentially fueling investigations into operational practices and contractor relationships.