DHS data breach exposes thousands of personnel records
A massive cybersecurity incident has exposed the personal details of more than 41,000 personnel working for the US Department of Homeland Security (DHS), including thousands of immigration enforcement workers. The unprecedented breach was published online on Wednesday through a database named Icepick hosted by Distributed Denial of Secrets (DDoSecrets). This incident represents the third time in recent weeks that a federal government agency has been targeted by hacks or leaks.
The compromised records feature the names, work addresses, and phone numbers of staff members from multiple federal entities. According to the data, over 21,000 agents work for Customs and Border Protection (CBP), while nearly 6,600 are employed by Immigration and Customs Enforcement (ICE). Additional records implicate workers from Homeland Security Investigations, the Federal Protective Service, and the Cybersecurity and Infrastructure Security Agency.
Behind the Icepick database and Okta breach
The leak was orchestrated by a group called the Department of Peace alongside cybersecurity researcher and hacker maia crimew. According to the group's online statement, the hackers accessed the DHS agent profiles through a single sign-on service called Okta. An Okta spokeswoman stated that the company is aware of the claims but noted that Okta is secure and there is no evidence of a data or system compromise.
Aside from employee contact information, the leaked files revealed dozens of previously unknown operation names, the personnel who led them, and technology utilized in the field—including tools provided by Cellebrite and Palantir. Emma Best, a co-founder of DDoSecrets, stated that the goal of the release was to replace anonymity with accountability rather than serving as a complete directory of every agent.
Rising tensions and recent government hacks
- More than 41,000 DHS personnel records compromised in the Wednesday breach.
- Over 21,000 affected agents belong to CBP, with nearly 6,600 tied to ICE.
- The database was published on a website hosted by DDoSecrets under the name Icepick.
- The Department of Peace claimed access was gained through an Okta single sign-on service.
This incident follows a pattern of recent federal security breaches. Last month, the FBI was hacked by a group named ShinyHunters, resulting in personal information of thousands of agents being taken. In addition, the Federal Election Commission was recently taken offline due to a suspected hacking attempt.
The leak also arrives amid heightened public backlash regarding US immigration enforcement under the Trump Administration, which has driven a major increase in arrests and deportations. Government data from the Migration Policy Institute indicates that the US has enacted nearly 1 million deportations since President Donald Trump returned to office in 2025, with more than 70% involving individuals with no criminal record.
Frequently Asked Questions
What information was included in the DHS leak?
The leak exposed the names, work addresses, and phone numbers of over 41,000 DHS personnel, along with descriptions of their agency work, covert operation names, and technology used by the agencies.
Who claimed responsibility for the Department of Homeland Security breach?
A group called the Department of Peace, alongside cybersecurity researcher maia crimew, published the information in a database named Icepick hosted by Distributed Denial of Secrets.
How did the hackers access the DHS agent profiles?
The Department of Peace stated that they accessed the records through a single sign-on service called Okta, though Okta stated they have no evidence their systems were compromised.