A database dubbed “Icepick” posted online this week contains names, work addresses and phone numbers of more than 41,000 Department of Homeland Security employees, marking one of the largest disclosures of US immigration‑enforcement personnel to date.
Key points
- The leak exposes personal contact information for thousands of DHS immigration officials, highlighting vulnerabilities in government credential systems.
- Okta, the single‑sign‑on provider cited as the breach vector, denies any confirmed compromise, underscoring the difficulty of attributing responsibility in large‑scale cyber incidents.
- The release is positioned by its publishers as a transparency measure, but it also raises concerns about the safety of agents and the potential for misuse of the data.
The leak, made public by a group calling itself the Department of Peace in partnership with journalist and cybersecurity researcher maia crimew and the Distributed Denial of Secrets platform, lists personal and work details for over 41,000 DHS staff, including thousands of Immigration and Customs Enforcement (ICE) and Customs and Border Protection (CBP) agents.
According to the released data, more than 21,000 of the individuals work for CBP and roughly 6,600 for ICE, with additional records for Homeland Security Investigations, the Federal Protective Service and the Cybersecurity and Infrastructure Security Agency. The files also name dozens of previously unknown operation titles, the agents leading them, and technology providers such as Cellbrite and Palantir.
Scope of the breach
The Department of Peace said the information was accessed through a single‑sign‑on service called Okta. An Okta spokeswoman responded that the company is “secure, and we have no evidence our data or systems were compromised,” while a DHS spokesperson confirmed the agency is “aware of a potential breach and is actively working to address the situation swiftly and effectively.”
Emma Best, co‑founder of DDoSecrets, framed the release as an attempt to replace “anonymity with accountability,” noting that the leak identifies officials overseeing covert operations and the department’s deportation programs. The group also referenced the 2020 BlueLeaks incident, which similarly exposed US police data.
How the data was obtained
The breach follows a spate of recent government cyber‑incidents, including a hack of the FBI by the ShinyHunters group and a suspected attack on the Federal Election Commission. Public criticism of US immigration enforcement has intensified, with ICE agents involved in multiple violent incidents this year, prompting calls for greater transparency.
Reader questions
What specific information was included in the DHS leak?
The database contains names, work addresses, phone numbers and agency assignments for more than 41,000 DHS employees, as well as operation names, lead agents and details about technology used in those operations.
Who made the leaked data publicly available?
The data was posted online by a group called the Department of Peace, in collaboration with journalist maia crimew and the Distributed Denial of Secrets platform, under the database name “Icepick.”
How has the Department of Homeland Security responded?
A DHS spokesperson said the agency is aware of a potential breach and is working to address it quickly, adding that the department takes security threats against its employees seriously and will provide updates as more information becomes available.
Source: bbc.com
