A major cybersecurity breach has exposed personal information belonging to more than 41,000 Department of Homeland Security employees, laying bare contact details of federal agents alongside internal ties to invasive surveillance software. The exposed records include names, job titles, direct phone numbers, email addresses, and office locations for personnel across agencies that have historically gone to great lengths to conceal field agents' identities.
A hacker operating under the pseudonym "Department of Peace" reportedly compromised the records through Okta, an identity and access management provider utilized by the department. According to reports from TechCrunch and Wired, roughly 21,000 of the compromised records belong to Customs and Border Protection (CBP) personnel, while nearly 7,000 pertain to Immigration and Customs Enforcement (ICE) staff. The cache also spans employees at Homeland Security Investigations, the Cybersecurity and Infrastructure Security Agency, and Citizenship and Immigration Services. Justifying the intrusion as an act of reciprocal exposure, the hacker stated, "They have our information, so it’s only fair that we have theirs."
Crucially, the leak goes beyond personnel rosters by detailing which specific departmental units maintain access to specialized tracking tools. These include Mobile Fortify, a mobile facial recognition tool, and PenLink, an analytical platform designed to intercept and process communications from mobile devices and web services. The dataset, dubbed "Icepick," was reportedly transferred to independent cybersecurity researcher maia arson crimew, who subsequently provided it to the transparency collective Distributed Denial of Secrets for public hosting.
The release arrives just weeks after a separate intrusion compromised FBI employee and applicant records, compounding concerns over the security of sensitive federal databases. While public interest groups have persistently pressed for transparency regarding domestic surveillance and immigration enforcement tactics, the unredacted release of individual agents' contact information and postings underscores an escalating conflict between institutional accountability and personnel safety.