Hacker publishes work data on more than 40,000 Homeland Security employees
Original title: Hacker stole personnel data about thousands of Homeland Security employees, including CBP and ICE agents
The dataset covers CBP, ICE, and CISA contacts plus application-access groups; Okta denies its systems were breached.
A hacker using the handle Department of Peace published personally identifiable work information on more than 40,000 Department of Homeland Security employees and contractors. Records include names, titles, emails, cell numbers, office locations, and Active Directory group memberships. The hacker claims the data came from an Okta single sign-on system; Okta says it has no evidence its data or systems were compromised. DHS had not commented, and TechCrunch verified part of the dataset.
Unconfirmed: How the data was taken is unconfirmed, and DHS has not said whether it knows of the theft.
- More than 21,000 records relate to Customs and Border Protection.
- About 10,000 records concern ICE and Homeland Security Investigations.
- Just under 1,000 records are tied to CISA employees.
- Timestamps indicate the directory records were taken around mid-August.
- The same hacker earlier claimed theft of DHS contract records.
Impact: Work identities, contacts, and internal access groups of DHS staff
- Vendors
- Okta
- Threat actors
- Department of Peace
- Victims
- U.S. Department of Homeland SecurityU.S. Customs and Border ProtectionImmigration and Customs EnforcementCISA
- Organizations
- DDoSecrets
- Countries
- United States
From the original article
5 min read at techcrunch.com
A hacker obtained personally identifiable information about more than 40,000 Homeland Security staffers, which has since been published online.
By Zack Whittaker · techcrunch.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.