Hackers Publish Data on 41,000 DHS Staff and Contractors

More than 40,000 Department of Homeland Security employees and contractors were exposed in records published by Distributed Denial of Secrets in a searchable database called Icepick, after a group calling itself the Department of Peace claimed it obtained the data through an employee single-sign-on system. The records reportedly include names, work contact details, job assignments and access information across DHS agencies and components, including ICE and Customs and Border Protection; some identify personnel involved in undercover, surveillance and other sensitive work. The group described the release as a response to intensified immigration enforcement, while Distributed Denial of Secrets said the database could support reporting and oversight, and the disclosure raised concerns about risks to staff. DHS acknowledged a potential breach, said it was investigating and working to protect affected employees, and sought to have an Icelandic hosting company restrict access to the database, warning of risks including harassment, stalking and physical harm; the company declined, saying the contact details were work information. Okta said it found no evidence its systems or data were compromised, and the leak came amid a series of recent breaches involving U.S. government personnel and systems.