A massive cyberattack has compromised the personnel files of the U.S. Department of Homeland Security, leaking the personal data of more than 40,000 DHS employees. The hacktivist collective known as the Department of Peace claimed responsibility for the breach, which exposed names, phone numbers, and addresses of agents, operatives, and associates on Wednesday.
Details of the DHS personnel files breach
The hacktivist group explained in an online statement that they breached the security perimeter by subverting the agency's single sign-on system. A spokesperson for the Department of Peace explicitly tied the attack to political pressure, stating online that on July 17th, Markwayne Mullin said he was turning up the heat, and that this is what happens to ICE when you do that.
The stolen data encompasses roughly a fifth of the total Homeland Security workforce, which currently employs slightly more than 220,000 people.
Breakdown of affected agency personnel
According to the leaked figures, specific divisions within the department bore the brunt of the compromised records:
- More than 21,000 records identify employees linked with U.S. Customs and Border Protection.
- Another 10,000 records involve personnel from Immigration and Customs Enforcement and its Homeland Security Investigations unit.
- The remaining entries cover various other agents, operatives, and associated personnel, including those operating undercover.
How the Icepick database and leak spread
Following the cyberattack, the perpetrators distributed the trove of stolen material to the transparency group Distributed Denial of Secrets, which subsequently published the information online via a searchable database titled Icepick.
Additionally, the hacktivists shared the data with U.S.-based journalist Ryan Ottignon and a Swiss hacker identified as maia arson crimew. Ottignon stated that crimew handled all the technical work required to build a searchable online database for the leaked files.
Emma Best, cofounder of DDoSecrets, described the release as extraordinary yet deceptive in its simplicity. Best noted that the database explicitly links officials managing covert operations with key personnel working within rendition and deportation initiatives.
Department response and future oversight
In an official statement, DHS responded by confirming that the department was aware of a potential breach and was actively working to address the situation swiftly and effectively. The agency added that it is taking necessary steps to ensure all individuals are properly protected.
Activists supporting the release argue that the newly public names and contact details will greatly assist investigators and citizens filing freedom of information requests. Ottignon rejected criticism that the project constituted doxing government workers, arguing that public officials conducting operations in communities should not hide their identities.
Frequently Asked Questions
How many DHS employees were exposed in the hack?
The data breach exposed the identities, phone numbers, and addresses of more than 40,000 DHS agents, operatives, and associates.
How did the hackers steal the DHS personnel files?
The hackers stated that they successfully stole the data by subverting the Department of Homeland Security's single sign-on system.
What is the Icepick database?
Icepick is an online searchable database created by a Swiss hacker and a journalist using data distributed by the Department of Peace and published via Distributed Denial of Secrets.