Personal details of more than 40,000 US Department of Homeland Security employees have been published online, exposing information about officials working in sensitive areas including surveillance, undercover operations and digital forensics.
The leak raises fresh questions about the security of government personnel data and the potential risks facing employees responsible for immigration enforcement and national security.
Data transparency group Distributed Denial of Secrets said on Wednesday that it had released information obtained by an entity calling itself the Department of Peace.
The material reportedly includes names, phone numbers, email addresses, and job titles of employees across several agencies, including Immigration and Customs Enforcement (ICE). Email groups and other records also appear to identify personnel assigned to special operations, surveillance, computer forensics and undercover work.
Exposing such information could raise security concerns for employees whose roles require discretion, although the full extent of the potential risks has not been established.
The Department of Homeland Security said it was โaware of a potential breachโ and was โactively working to address the situation swiftly and effectivelyโ.
The department added that it was working to ensure employees were properly protected and would provide further information when available.
Hacktivists claim access through Okta
The Department of Peace said it obtained the information through Okta, a sign-on service used to manage access to digital systems.
Okta rejected suggestions that its own systems had been compromised.
โOkta is secure, and we have no evidence our data or systems were compromised,โ the company told Reuters.
The distinction leaves open questions about how the attackers accessed the information and whether the incident involved compromised credentials, a customer environment or another weakness.
Distributed Denial of Secrets co-founder Emma Best said hacktivist and journalist Maia Arson Crimew developed a search tool that lets the public browse the leaked data.
Best argued that the tool could support journalism, public records requests and congressional oversight, describing its purpose as helping to โreplace anonymity with accountabilityโ.
However, making identifiable information about security personnel searchable also raises privacy concerns and the risk of misuse.
Previous DHS breach claims intensify scrutiny
The Department of Peace said its actions were justified because government employees possessed information about the public.
โDHS employees have our information, so it’s only fair that we have theirs,โ the group said.
In March, the same entity claimed responsibility for hacking DHS and publishing documents relating to contracts with external vendors.
The latest incident could intensify scrutiny of the departmentโs cybersecurity safeguards, particularly its ability to protect employee information connected to sensitive operations.
Important questions remain unanswered, including how the data was obtained, whether the exposed records are current, and what steps the department is taking to prevent further disclosure.
Until investigators establish the circumstances of the incident, the full implications for national security and employee safety remain uncertain.
Leave a Comment