Article Icepick

ddosecrets.org • October 28, 2026

An internal database identifying more than 41,000 employees for the U.S. Department of Homeland Security (DHS). The database, from an Okta single sign-on service used by the DHS, reveals employee names, offices, information, and assignments. The data was obtained by a hacktivist group known as the Department of Peace who provided copies to Distributed Denial of Secrets and maia arson crimew.

crimew created an online tool hosted at Icepi.cx . This online tool not only makes it easier to the data, but it also significantly cleans and enriches the raw data, with the cleaning process aided by crimew's longtime co-researcher and journalist Ryan Fae.

"On July 17th, Markwayne Mullin said he was 'turning up the heat.' This is what happens to ICE when you do that," said a spokesperson for Department of Peace.

"This dataset is massive in terms of both size and impact. It provides an unprecedented look into the Department of Homeland Security's organizational structure, highlighting which people do what work across multiple DHS agencies, including ICE," said journalist and hacktivist maia arson crimew. "It is a complete game changer for anyone investigating DHS, simplifying the identification of agents and their lines of command. It provides FOIA material for years to come!"

"Rather than an indiscriminate directory of every DHS employee, Icepick identifies many of the architects and drivers of DHS policy and operations," said journalist and DDoSecrets cofounder Emma Best. "The leak is extraordinary but deceptive in its simplicity as it identifies the officials responsible for overseeing covert and undercover operations, the government's hunt for leakers and the failed BlueLeaks investigation — along with key personnel in DHS's ever-escalating rendition and deportation programs."

"Email addresses and phone numbers are indispensable tools for FOIA researchers, often making the difference between a vague records request that gets stonewalled and one that gets results," said Dr. Ryan Shapiro, executive director of Property of the People. "Given the Trump administration's contempt for even basic transparency, the need for such tools is urgent."

"By replacing the regime's anonymity with accountability, Icepick and the tool developed by maia are catalyst for investigations, empowering journalists, Congressional inquiries, legal challenges, community action and Freedom of Information Act requests," added Best.

'Icepick' leak exposes thousands of Homeland Security personnel, groups and more (Unicorn Riot) · Archive link

Hacker stole personnel data thousands of Homeland Security employees, including CBP and ICE agents (TechCrunch) · Archive link

Shielded by DHS, immigration agents' identities exposed in massive data breach (Straight Arrow News) · Archive link

Latest drop by Distributed Denial of Secrets (DDoS) contains info for 40,000 DHS employees (Techdirt) · Archive link

Massive leak exposes 41,000 Homeland Security workers — including undercover ICE agents (Wired) · [No archive link available] · Archive.Today link

DHS hack exposes 40,000 employee names and undercover ICE agents, activists say (NBC News) · [No archive link available] · Archive.Today link

Leak website releases data on tens of thousands of DHS employees (Reuters) · [No archive link available]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Massive Data Leak Exposes Over 41,000 DHS Employees A significant data breach has compromised the personal information of more than 41,000 employees of the U.S. Department of Homeland Security (DHS), including agents from Immigration and Customs Enforcement (ICE) and Customs and Border Protection (CBP). The hacker group known as the Department of Peace accessed the data through an Okta single sign-on system used by DHS. The leaked information includes names, job titles, email addresses, phone numbers, and office locations, revealing sensitive details about covert operations and surveillance programs. The dataset, named 'Icepick,' was published by the transparency nonprofit Distributed Denial of Secrets (DDoSecrets). Okta has stated that it has no evidence of a breach in its systems. The leak has raised concerns about the safety of DHS personnel, especially those involved in controversial immigration enforcement activities. This incident follows a series of high-profile breaches affecting U.S. government agencies, including a recent breach involving the FBI. 5 sources 71

Extracted Entities

Article Icepick

The full story

Extracted Entities

Attack Types (1)

Companies (2)

Domains (1)

Industries (1)