A hacking group accessed the U.S. Department of Homeland Security’s (DHS) personnel records, revealing the names, phone numbers, and addresses of over 40,000 agents, operatives, and associates. This breach affects those involved in undercover operations.
The group responsible, known as the Department of Peace, released a statement online following the incident. They claimed to have compromised DHS by exploiting their single sign-on system. The stolen data was distributed to the group Distributed Denial of Secrets, which published it in a database labeled ‘Icepick.’
The Department of Peace also provided the data to U.S.-based journalist Ryan Ottignon and Swiss hacker maia arson crimew. Crimew developed a searchable online database, facilitating access to the data.
Extraordinary but deceptive in its simplicity,
said Emma Best, cofounder of DDoSecrets. The breach links officials overseeing covert operations and key personnel in programs handling rendition and deportation.
Activists believe the leaked information will assist those seeking to investigate DHS and file freedom of information requests. These requests often yield inadequate results due to missing specific information, like names or email addresses.
DHS confirmed awareness of the breach, stating they are “actively working to address the situation swiftly and effectively” and are taking necessary measures to protect everyone involved. The data breach includes over 21,000 records from U.S. Customs and Border Protection and another 10,000 related to Immigration and Customs Enforcement employees.
This breach represents around a fifth of DHS’s workforce, which comprises slightly over 220,000 staff members. It follows recent hacking incidents at the FBI.
Ottignon, experienced with similar data leak projects, dismissed accusations of doxing. He defended the release, arguing that officials often hide their identities and engage in activities detrimental to communities.
He emphasized the need for oversight in government operations to ensure their utility in society. DDoSecrets echoed this sentiment with a note stating, “They have our information, so it’s only fair that we have theirs.”