Wired Massive Data Leak Exposes 41,000 DHS Employees' Information
Article Content
- •Over 41,000 DHS employees' personal information was leaked, including ICE and CBP agents.
- •The breach was executed via the Okta single sign-on system used by DHS.
- •The leaked dataset, named 'Icepick', provides detailed insights into DHS operations and personnel.
A significant data breach has revealed the personal information of over 41,000 employees from the U.S. Department of Homeland Security (DHS), including agents from Immigration and Customs Enforcement (ICE) and Customs and Border Protection (CBP). The breach was executed by a group known as the Department of Peace, which accessed the data through the Okta single sign-on system used by DHS. The leaked information includes names, job titles, email addresses, and phone numbers, providing insights into the agency's internal operations and personnel involved in sensitive activities. The dataset, referred to as 'Icepick', was made public by the nonprofit organization Distributed Denial of Secrets (DDoSecrets). DHS has acknowledged the breach and is investigating the incident, while Okta claims its systems were not compromised. This incident marks the third major government data leak in recent weeks, following similar breaches at the FBI and the Defense Department.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (30)
Following this threat?
Track Customs And Border Protection in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Common questions
What information was leaked?
How did the breach occur?
What actions is DHS taking in response?
Continue Reading
Volt Typhoon's Silent Train Network Targets US Critical Infrastructure The Chinese state-sponsored hacking group Volt Typhoon has been linked to a covert network called Silent Train, which has exploited at least four zero-day vulnerabilities over three years. This network utilizes rapidly rotating chains of compromised SOHO routers, IoT devices, and enterprise infrastructure to access…
Brotli Decoder Vulnerability Patched Across Multiple Linux Distributions A vulnerability, CVE-2026-111497, affecting the Brotli decoder has been patched in various Linux distributions, including Fedora 44 and Oracle Linux 10. The flaw allows for an out-of-bounds write, which could potentially enable attackers to execute arbitrary code. The vulnerability was published on October 22, 2026…