Department of Peace leaks records on over 41,000 DHS employees
Original title: Over 41,000 DHS Employee Records Leaked Online
The posted set includes work contacts, job details, and which internal systems each account can reach; Okta denies a compromise.
A person using the handle Department of Peace posted more than 41,000 records on US Department of Homeland Security employees and contractors. The records mainly cover Customs and Border Protection, ICE, and Homeland Security Investigations, plus about 1,000 CISA employees. The leaker says the data came from an Okta single sign-on system. Okta told SecurityWeek it has no evidence its data or systems were compromised. Distributed Denial of Secrets calls the copy Icepick; DHS had not responded.
Unconfirmed: The Okta origin is the leaker's claim; Okta denies compromise and DHS had not confirmed the incident.
- Leaked fields include names, work emails, phones, titles, offices, and application access.
- Most records concern CBP, ICE, and HSI, with roughly 1,000 CISA employees included.
- DDoSecrets obtained a copy and calls the database Icepick.
- An online tool for searching the leaked records is available.
- SecurityWeek asked DHS for comment and had not received a response.
Impact: Employee identities, work contacts, roles, and system access rights
- Vendors
- Okta
- Threat actors
- Department of Peace
- Organizations
- Distributed Denial of Secrets
- Countries
- United States
From the original article
2 min read at securityweek.com
The personal and work information was allegedly stolen from an Okta single sign-on system earlier this year. The post Over 41,000 DHS Employee Records Leaked Online appeared first on SecurityWeek.
By Ionut Arghire · securityweek.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.