Sensitive personal details of more than 41,000 Department of Homeland Security (DHS) employees, including immigration enforcement personnel, have been publicly exposed following a significant cyberattack.
The leaked dataset contains names, work addresses, phone numbers, and job descriptions of DHS staff across Immigration and Customs Enforcement (ICE), Customs and Border Protection (CBP), and other divisions, revealing operational details of their work.
This incident represents the third major data exposure involving a U.S. government agency in recent weeks.
A DHS spokesperson confirmed the agency is addressing a potential breach, emphasizing efforts to protect employees and maintain workplace security.
The breach was facilitated by access to DHS systems via a single sign-on platform called Okta, which denied any compromise of its own infrastructure.
The exposed information, hosted on a public database named “Icepick,” was obtained by a collective including journalist Maia Crimew and the website Distributed Denial of Secrets. The group stated their objective was to “replace anonymity with accountability,” highlighting previously classified operation names and key personnel involved in immigration enforcement, rendition programs, and oversight of the failed BlueLeaks investigation.
According to the data, over 21,000 agents work with CBP, while nearly 6,600 are affiliated with ICE. Additional records include personnel from Homeland Security Investigations, the Federal Protective Service, and the Cybersecurity and Infrastructure Security Agency.
The leak also disclosed classified operation details, personnel roles, and technologies used, including tools from Cellbrite and Palantir.
Emma Best, a co-founder of Distributed Denial of Secrets, explained the group’s intent: “The breach replaces anonymity with accountability, identifying officials overseeing covert operations, leak investigations, and enforcement programs.”
The Department of Peace, which claimed responsibility for the hack, cited ICE agent misconduct as justification for their actions, referencing statements by Secretary of Homeland Security Markwayne Mullin.
Okta stated it has “no evidence” of system compromises but acknowledged ongoing investigations into the claims.
Recent cybersecurity incidents include a ShinyHunters breach targeting FBI agents and a suspected attack on the Federal Election Commission, highlighting escalating threats to U.S. infrastructure.
The leak coincides with intensified immigration enforcement under the Trump administration, which has pushed for aggressive arrests and deportations, resulting in a record 1 million removals in 2025, according to the Migration Policy Institute. Over 70% of these involved individuals without criminal records, amid reports of violent confrontations and multiple fatalities during enforcement actions.
Also Read
- Demands for post-poll justice as Tanzania accused of weaponising counterterrorism laws
- Drone Strike in Darfur Market Kills More Than 100, Including Women and Children
- Kremlin Aide Says Timing of Ukraine Talks May Depend on Middle East Developments
- Journalists Attacked by Israeli Settlers in West Bank Incident
