Hackers publish work details on more than 41,000 DHS employees
The Icepick dump lists ICE, CBP and CISA contacts and internal groups; DHS calls it a potential breach.
76
Threat actor
Department of Peace
- Mentions · 7d12
- Mentions · 30d12
- All mentions12
- First seenOct 28, 2026
- Last mentioned9h ago
Timeline
12 articles · newest firstHacker leaks work contacts for more than 40,000 DHS employees
Records cover CBP, ICE, and CISA staff; the leaker claims an Okta SSO source, which Okta says it has no evidence was compromised.
76
GhostWriter linked to first Belarus data wipe at Ukrainian firm
ESET ties FrostyNeighbor to the wipe and says Belarus-aligned operators increasingly mirror Russian priorities in Ukraine.
64
Published records identify more than 41,000 DHS personnel
The set includes phones, emails, job titles and some surveillance, forensics and undercover roles.
80
Department of Peace leaks records on over 41,000 DHS employees
The posted set includes work contacts, job details, and which internal systems each account can reach; Okta denies a compromise.
78
Hackers expose identities of more than 40,000 DHS employees
DHS called it a potential breach; the set covers about a fifth of a workforce a little over 220,000.
78
Hacktivists publish records of more than 41,000 DHS employees
The Icepick dataset, published October 28, covers ICE and CBP staff and groups tied to undercover work; Okta denies a breach.
78
Leak exposes personal details of over 41,000 DHS employees
Distributed Denial of Secrets published records it attributes to “Department of Peace”; Reuters matched some entries but not the collection method.
78
DDoSecrets publishes records of 41,000 DHS personnel, including undercover links
The Icepick archive, last updated August 19, lists emails, phones, supervisors, and more than 55,000 permission groups across seven DHS components.
76
Leak site publishes data on more than 41,000 DHS employees
Hacktivists calling themselves Department of Peace say they took an Okta SSO database; Okta denies any compromise.
78
Hacker publishes work data on more than 40,000 Homeland Security employees
The dataset covers CBP, ICE, and CISA contacts plus application-access groups; Okta denies its systems were breached.
78
Leak details more than 41,000 Homeland Security workers and access groups
DDoSecrets published the archive as Icepick; group names reference undercover work, wiretaps, and surveillance tools.
78
Appears with
- Oktavendor · 9
- Distributed Denial of Secretsorganization · 7
- Immigration and Customs Enforcementvictim · 5
- U.S. Department of Homeland Securityvictim · 5
- Department of Homeland Securityvictim · 5
- DDoSecretsorganization · 4
- U.S. Customs and Border Protectionvictim · 3
- Customs and Border Protectionvictim · 3
- CISAvictim · 3
- Cybersecurity and Infrastructure Security Agencyvictim · 2
- Cybersecurity and Infrastructure Security Agencyorganization · 2
- FrostyNeighborthreat actor · 1
- Coinbasevictim · 1
- Zenith Technologyvictim · 1
- Homeland Security Investigationsvictim · 1
- Federal Election Commissionvictim · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.