Data From More Than 41,000 DHS Workers Exposed in Massive Leak

A hacker has exposed a massive trove of data revealing the inner workings of the U.S. Department of Homeland Security (DHS). Records identifying more than 41,000 DHS employees and contractors were published online Wednesday by the nonprofit Distributed Denial of Secrets (DDoSecrets), which specializes in publishing and archiving leaked datasets. DDoSecrets says the data came from an Okta single sign-on system used by DHS and includes employee names, office locations, contact information, job titles, and assignments. The records also reportedly reveal the software employees may have access to. The data was allegedly obtained by a hacktivist group known as the Department of Peace, who provided copies to DDoSecrets and independent journalist maia arson crimew. “On July 17th, Markwayne Mullin said he was ‘turning up the heat.’ This is what happens to ICE when you do that,” said a spokesperson for the Department of Peace in a statement published on DDoSecrets’ website. Crimew also created an online search tool to make it easier to sift through the massive trove of data. “This dataset is massive in terms of both size and impact. It provides an unprecedented look into the Department of Homeland Security’s organizational structure, highlighting which people do what work across multiple DHS agencies, including ICE,” said crimew. “It is a complete game changer for anyone investigating DHS, simplifying the identification of agents and their lines of command. It provides FOIA material for years to come!” However, the search tool, which was hosted at icepi.cx, has reportedly been taken offline by its domain registrar. WIRED also reported Wednesday that the social media platform Bluesky had started blocking links to the leaked data, labeling them as “malicious.” DDoSecrets has since made the source code for the search tool available for download. The leak comes just over a month after a similar incident involving the Federal Bureau of Investigation (FBI). In September, the hacking group ShinyHunters shared a spreadsheet with several media outlets containing personal information on roughly 5,000 alleged FBI employees. The records reportedly included employees’ job assignments, home addresses, phone numbers, and emergency contact information. ShinyHunters also posted a statement online addressed to FBI Director Kash Patel and Brett Leatherman, who oversees the bureau’s cyber division, taking responsibility for the breach and claiming it was carried out in retaliation for an FBI advisory about the group, according to The New York Times. As for the latest leak, DHS says it is investigating the incident. “DHS is aware of a potential breach and is actively working to address the situation swiftly and effectively,” a spokesperson for the department told Gizmodo in an emailed statement. “We take all security threats against our employees and officers seriously and will work to ensure all are properly protected. We will update the public when more information is available.”