Technology
Department of Peace claims hack exposed 41,000 DHS personnel details
The data was shared through a Distributed Denial of Secrets website, while Okta reports no evidence its systems were compromised.
The short version
- More than 41,000 DHS personnel's details were leaked, including over 21,000 CBP and nearly 6,600 ICE staff.[BBC News]
- A group called the Department of Peace, with hacker maia crimew, put the data online on Wednesday.[BBC News]
- Okta says it has no evidence of compromise, while DHS says it is aware of a potential breach and is working to address it.[BBC News · Deutsche Welle]
- How the group accessed the profiles remains disputed, and DHS did not immediately respond to a request for comment.[BBC News]
Key facts
- Details of more than 41,000 Department of Homeland Security personnel have been leaked to the public.[BBC News]
- More than 21,000 of the agents in the data work for CBP, and nearly 6,600 work for ICE.[BBC News]
- The information was placed in a database named Icepick and shared through a Distributed Denial of Secrets website.[BBC News]
- A group called the Department of Peace, alongside cybersecurity researcher and hacker maia crimew, put the breach online on Wednesday.[BBC News]
- The Department of Peace said it accessed the DHS agent profiles through a single sign-on service called Okta.[BBC News]
- Okta said it is aware of the claims but has no evidence its data or systems were compromised.[BBC News]
- DHS said it was aware of a potential breach and is actively working to address the situation.[Deutsche Welle]
- Reuters called three DHS employees based on the data and was able to confirm their phone numbers and other details.[Deutsche Welle]
What remains uncertain
- The Department of Peace's claim that it accessed agent profiles through Okta is disputed, because Okta says it has no evidence of compromise.[BBC News]
- Reuters confirmed details for three employees, but the reporting does not establish the accuracy of the full dataset.[BBC News · Deutsche Welle]
Sources
Outlet counts describe coverage, not independent confirmation. Reports may share a wire service or original source.