Hackers publish work details on more than 41,000 DHS employees
Original title: Hackers steal and publish data on 41,000 Homeland Security workers
The Icepick dump lists ICE, CBP and CISA contacts and internal groups; DHS calls it a potential breach.
A group calling itself the Department of Peace says it stole and published work details for more than 41,000 US Department of Homeland Security employees. Swiss hacktivist maia arson crimew and DDoSecrets released the files, which the publishers call Icepick. Records include names, work emails, phones, office addresses, titles and Active Directory group memberships, covering nearly 6,600 ICE staff and over 21,000 CBP employees, plus CISA workers. DHS says it is aware of a potential breach. Okta says it has no evidence its systems were compromised.
Unconfirmed: Okta denies evidence its systems were compromised, and DHS has only acknowledged a potential breach; some published details may not come from the stolen data.
- Timestamps cited by TechCrunch suggest the records were taken around mid-August.
- Files cover staff at nearly 7,000 offices and more than 200 CBP users of Mobile Fortify.
- The dump has less sensitive data than a reported September FBI theft by ShinyHunters.
- A separate searchable copy may add details that were not in the stolen files.
- The group also claimed a March theft of DHS contract documents.
Impact: Work contacts and internal group memberships of DHS staff exposed
- 1.Follow DHS security guidance and report suspicious contact or threats to agency security.
- 2.Verify unexpected calls, emails and texts through a trusted channel; never share passwords or MFA codes.
- 3.Change personal passwords reused for work and enable MFA where available.
- ATT&CK
- T1078 Valid Accounts
From the original article
4 min read at malwarebytes.comA hacker group claims it stole data on 41,000 DHS employees, exposing work contact details and internal group memberships.
By @malwarebytes · malwarebytes.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.