DDoSecrets Publishes More Than 40,000 Records Tied to DHS Staff

A hacker called “Department of Peace” claims data on more than 40,000 Department of Homeland Security (DHS) employees was taken through an Okta single sign-on system; Distributed Denial of Secrets (DDoSecrets) published the files Wednesday.

Published as the “Icepick” dataset, the files contain more than 40,000 records, about one-fifth of DHS’ roughly 220,000-employee workforce. The records list names, job titles, work email addresses, phone numbers and office locations, alongside details tied to access to internal systems.

About 21,000 records are linked to Customs and Border Protection (CBP). Roughly 10,000 involve Immigration and Customs Enforcement (ICE) and Homeland Security Investigations (HSI), while nearly 1,000 relate to the Cybersecurity and Infrastructure Security Agency (CISA).

File timestamps point to an export around mid-August. Okta said its own systems and data were not compromised.

The release is the third high-profile U.S. government data exposure in less than a month, after thefts involving FBI personnel files and Pentagon personnel data.