Ethical Hacking News
A hacker has leaked sensitive data of over 40,000 Homeland Security employees, exposing their organizational structure and personnel. The breach, which occurred earlier this year, has raised concerns about the security of the federal agency and its employees. The leaked database, known as Icepick, contains information on employees, their roles, and access to sensitive tools. DHS is investigating the breach and taking steps to address the situation. The incident highlights the ongoing threat of cyber attacks against government agencies and the need for greater security measures to protect sensitive information.
Over 40,000 DHS employees' personal data, including names, job titles, and contact info, was leaked online.The breach was caused by a hacker who claimed to have stolen the data as a response to government actions against Immigration and Customs Enforcement (ICE).The leaked database, "Icepick," contains over 21,000 CBP employees' records, 10,000 ICE employees' records, and 1,000 CISA employees' records.The breach raises concerns about security, privacy, and transparency, with potential risks including targeted FOIA requests and exposure of employee phone numbers and office locations.DHS is investigating the breach and has confirmed that it takes employee security seriously, with a spokesperson stating that the agency will work to ensure all security threats are properly protected.The incident highlights the ongoing threat of cyber attacks against government agencies and the need for greater security measures to protect sensitive information.
A shocking data breach has left over 40,000 employees of the U.S. Department of Homeland Security (DHS) vulnerable to cyber attacks, with sensitive information including names, job titles, and work contact details such as email addresses, cell phone numbers, and office locations being leaked online. The breach, which occurred earlier this year and was not previously disclosed, has sparked concerns about the security of the federal agency and its employees.
According to reports, the data was stolen from an Okta single sign-on system, which provides employees and contractors with access to the department's central network. The Okta system also stores IT and login records, showing which systems and internal apps each person can access. The hacker, who goes by the name Department of Peace, claimed to have stolen the data as a response to the government's actions against Immigration and Customs Enforcement (ICE).
The leaked database, known as Icepick, contains over 21,000 records of CBP employees working at airports and other ports of entry, 10,000 records of ICE employees, and just under 1,000 records of CISA employees. The database also reveals access to tools such as Microsoft 365, ChatGPT, Penlink surveillance software, and Mobile Fortify, a facial recognition app used by CBP and ICE.
Researchers say that the contact details in the database could be used to submit targeted Freedom of Information Act (FOIA) requests, which could provide valuable insights into the inner workings of the DHS. However, exposing employees' phone numbers and office locations also creates security and privacy risks.
The breach has raised concerns about the security of the federal agency and its employees. DHS confirmed that it is aware of the potential breach and is investigating, saying it takes threats to employees seriously and will provide updates when more information is available.
The incident follows other attacks on U.S. government agencies that exposed FBI records and military personnel data. It is also the second DHS breach this year, after the same hacker claimed to have stolen thousands of government contracts.
The leak has sparked a debate about the use of personal data in the public sector and the need for greater transparency and accountability. Researchers say that the Icepick database provides an unprecedented view of DHS's organizational structure, helping to identify employees, their roles, and reporting lines.
In a statement, DHS spokesperson said that the agency takes all security threats against its employees and officers seriously and will work to ensure all are properly protected. The spokesperson also stated that DHS will update the public when more information is available.
The incident highlights the ongoing threat of cyber attacks against government agencies and the need for greater security measures to protect sensitive information.
Related Information:
https://www.ethicalhackingnews.com/articles/Hacker-Leaks-Sensitive-Data-of-40000-Homeland-Security-Employees-Exposing-Organizational-Structure-and-Personnel-ehn.shtml
https://securityaffairs.com/202103/data-breach/hacker-leaks-data-on-more-than-40000-homeland-security-employees.html
https://www.theguardian.com/us-news/2026/oct/28/homeland-security-data-leak
Published: Fri Oct 30 02:22:38 2026 by llama3.2 3B Q4_K_M
