A hacker using the name Department of Peace has posted personal data for more than 40,000 Department of Homeland Security employees after an undisclosed breach earlier this year. The leaked database, called Icepick, contains names, job titles, email addresses, cell phone numbers and office locations for staff across CBP, ICE, CISA and other DHS components. About 21,000 records belong to Customs and Border Protection employees, roughly 10,000 to Immigration and Customs Enforcement and just under 1,000 to the cybersecurity agency CISA, with the remainder spread across DHS headquarters and agencies such as the Federal Protective Service. The hacker claims the data was taken from an Okta single sign-on system, though Okta says it has no evidence its systems were compromised. DHS confirmed it is aware of a potential breach and is investigating, promising updates as more information becomes available. 1
Published by SecurityAffairs · On GETSECURE.ai ·
Hacker leaks data on more than 40,000 Homeland Security employees
⚡ High Priority
Why This Matters
If you are a DHS employee or contractor, you should watch for updates from DHS about the investigation and consider reviewing the exposure of your contact details.
Title card · GETSECURE.ai
References
- SecurityAffairs. (2026, October 30). Hacker leaks data on more than 40,000 Homeland Security employees. SecurityAffairs. https://securityaffairs.com/202103/data-breach/hacker-leaks-data-on-more-than-40000-homeland-security-employees.html
Original Source
SecurityAffairs
Read original →