A massive leak published online lists details for more than 41,000 Department of Homeland Security workers across multiple agencies, including units tied to undercover and surveillance operations.
Story Snapshot
- A searchable database called “Icepick” lists records for over 41,000 Department of Homeland Security personnel.
- Reported fields include names, work emails, phone numbers, job titles, locations, and system access notes.
- Records span Customs and Border Protection, Immigration and Customs Enforcement, Homeland Security Investigations, and others.
- Okta said it has no evidence its systems were breached, while the Department of Homeland Security said it is responding.
What Was Released And Who Is Affected
Distributed Denial of Secrets published a database called “Icepick” that reportedly contains records for more than 41,000 Department of Homeland Security employees and contractors. Reported fields include names, work emails, work phone numbers, job titles, office locations, and notes on which internal applications an account could access. Coverage said some records reference sensitive operations, including surveillance and human intelligence work. The data’s last update reportedly occurred on August 19, 2026, suggesting recent activity.
Reports said the dataset spans several components. United Press International cited about 21,000 Customs and Border Protection records, about 6,600 Immigration and Customs Enforcement records, and additional entries linked to Homeland Security Investigations, the Federal Protective Service, and the Cybersecurity and Infrastructure Security Agency. SecurityWeek also reported records tied to Customs and Border Protection, Immigration and Customs Enforcement, Homeland Security Investigations, and about 1,000 Cybersecurity and Infrastructure Security Agency employees.
How The Leak Emerged And Who Handled It
Distributed Denial of Secrets received and published the archive after outside parties previewed it, according to multiple reports. WIRED reported that a cybersecurity researcher and journalist known as maia arson crimew reviewed the material before release, and United Press International reported that journalist Ryan Ottignon also received data. This path shows that third parties viewed the dataset before publication, which often happens in large hack-and-leak events.
Reports stated that the files included references to undercover and surveillance-linked programs, raising safety and privacy concerns for the employees named. Public release of names, work contacts, and job details can increase threats and harassment, regardless of who stole the data. That is why hosting platforms and agencies often move to limit access or to notify affected workers after such disclosures become public.
What Officials And Companies Are Saying Now
The Department of Homeland Security said it is aware of a potential breach and is working to address the situation quickly. The company Okta, which was named in some reports as part of the attackers’ claims, stated that Okta is secure and that it has no evidence its data or systems were compromised. Media accounts have repeated both statements while focusing on the size and sensitivity of the published Department of Homeland Security-related records.
BREAKING: UNPRECEDENTED BREACH UNMASKS MORE THAN 41,000 DHS EMPLOYEES INCLUDING UNDERCOVER ICE AGENTS AS HACKERS RELEASE MASSIVE PERSONNEL DUMP!
A Hacktivist Collective Identifying Itself As The Department Of Peace Has Released Personnel Records On Over 41,000 Employees &… pic.twitter.com/8x08mZCpbw
— John Basham (@JohnBasham) October 29, 2026
This incident fits a wider pattern seen in major leaks. Journalists can confirm that a large dataset exists and that some records match real people. At the same time, they may not be able to prove which exact system the attackers used to get the data. Prior cases, including a reported Federal Bureau of Investigation incident, showed the same split between data reality and source system certainty. That gap often drives public debate even as agencies move to secure affected staff.
Why It Matters Beyond Cybersecurity
Homeland security duties rely on trust, discretion, and steady operations. A leak of work contacts, roles, and access groups can disrupt that trust. It can expose the people who guard borders, track smugglers, and protect federal buildings to new risks. Both conservatives and liberals share a core concern here: the government collects vast data but struggles to protect it. When basic security fails, frontline workers and the public pay the price in safety and confidence.
Sources:
cnbc.com, upi.com, securityweek.com, wired.com, theverge.com, cyberscoop.com, ibtimes.co.uk, newsobserver.com, san.com, helpnetsecurity.com, 9news.com, tandfonline.com
