Hacker leaks work contacts for more than 40,000 DHS employees
Original title: Hacker leaks data on more than 40,000 Homeland Security employees
Records cover CBP, ICE, and CISA staff; the leaker claims an Okta SSO source, which Okta says it has no evidence was compromised.
A hacker using the name Department of Peace leaked names, job titles, and work contact details for more than 40,000 U.S. Department of Homeland Security employees after an undisclosed breach earlier this year. About 21,000 records belong to Customs and Border Protection, about 10,000 to ICE and Homeland Security Investigations, and just under 1,000 to CISA. DHS said it is aware of a potential breach and is investigating. The records, shared with DDoSecrets and partly verified by TechCrunch, also indicate access to tools such as Microsoft 365, ChatGPT, Penlink, and Mobile Fortify.
Unconfirmed: The hacker claims the data came from Okta SSO; Okta reports no evidence its systems were compromised, and DHS calls it a potential breach.
- Exposed fields include email addresses, cell numbers, and office locations.
- The leak covers about one-fifth of DHS’s 220,000 employees.
- TechCrunch’s checks suggest the database was copied around mid-August.
- DDoSecrets calls the database Icepick and says it identifies officials in covert and deportation work.
- The same hacker earlier claimed to have stolen thousands of government contracts.
Impact: Work contacts and access records for more than 40,000 DHS employees
- Vendors
- Okta
- Threat actors
- Department of Peace
- Victims
- U.S. Department of Homeland SecurityU.S. Customs and Border ProtectionImmigration and Customs EnforcementCISA
- Organizations
- DDoSecrets
- Countries
- United States
From the original article
3 min read at securityaffairs.com
A hacker leaks personal data on more than 40,000 DHS employees, including CBP, ICE and CISA staff, after an undisclosed breach. Personal details of thousands of U. S.
By Pierluigi Paganini · securityaffairs.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.