Skip to content
Massive Data Breach Exposes 41,000 DHS Employees' Personal Information

Massive Data Breach Exposes 41,000 DHS Employees' Personal Information

First seen 28 Oct 2026, 21:07 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •October 28, 2026 at 22:08 UTC
  • •Over 41,000 DHS employees' personal information exposed in a major data breach.
  • •Data leaked includes sensitive details from CBP, ICE, and other DHS agencies.
  • •The breach reportedly originated from an Okta single sign-on system, which Okta claims is secure.

A significant data breach has revealed personal information of over 41,000 employees and contractors of the Department of Homeland Security (DHS), including those from Customs and Border Protection (CBP) and Immigration and Customs Enforcement (ICE). The data, published by the hacker group 'Department of Peace' via the transparency nonprofit Distributed Denial of Secrets (DDoSecrets), includes names, job titles, email addresses, and phone numbers. The breach reportedly originated from an Okta single sign-on system used by DHS, which is claimed to be secure by Okta. The leaked records expose sensitive internal surveillance tools and undercover operations, affecting nearly one-fifth of DHS's total workforce. The incident underscores ongoing tensions as DHS has sought to shield employee identities amid controversial enforcement actions. The data was made publicly searchable, allowing for detailed organizational insights into DHS operations.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated just now How this analysis works

Timeline

2026-10-26
Data leak published by DDoSecrets
The hacker group released personal information of over 41,000 DHS employees online, including sensitive operational details.
Wired
2026-10-28
Multiple outlets report on the breach
Various news outlets confirm the breach and detail the extent of the data exposed, including employee roles and surveillance tools.
Ground.News

More articles in this cluster (7)

Following this threat?

Track Citizenship And Immigration Services in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (20)

1 / 3

Common questions

What types of information were leaked?
The leak includes names, job titles, email addresses, phone numbers, and details about internal surveillance tools.
How did the breach occur?
The data was reportedly obtained from an Okta single sign-on system used by DHS, which Okta claims has not been compromised.
What should affected employees do?
Affected employees should monitor for potential identity theft and consider changing passwords and security settings.