The personal information of more than 41,000 Department of Homeland Security employees was exposed by a hacker group.
A Department of Homeland Security breach by an activist group has exposed the personal information of more than 41,000 employees, including Customs and Border Protection workers, Immigration and Customs Enforcement officers and others who work in government cybersecurity.
Information collected from the breach was published online in a searchable repository called Icepick on the Distributed Denial of Secrets website. According to the news leaks site, a hacktivist group called the Department of Peace breached an Okta single sign-on service used by the DHS, stealing employees’ names, contact information and assignments. The group then distributed copies of the database through the leak-hosting group DDoSecrets and to a self-described investigative journalist and cybersecurity researcher from Switzerland known as maia arson crimew, who created an online tool to search the data.
The hacktivist crimew described the leak as an “unprecedented” and “massive” exposure of the DHS’s internal structure. By detailing exact roles, chains of command and agent identities across agencies like ICE, the dataset is a “complete game changer” that leaves the department highly vulnerable to outside investigation for years to come.
The breach appears to be the latest retaliation against government-led surveillance, including ICE’s increasingly tech-driven enforcement tactics and private partnerships with companies such as Flock Security .
Source link







