Hacker steals records on more than 41,000 DHS employees

A hacker stole personal information on more than 41,000 Department of Homeland Security (DHS) employees, including staff at US Immigration and Customs Enforcement (ICE) and Customs and Border Protection (CBP), according to TechCrunch and Wired.

The exposed records include names, job titles, phone numbers, email addresses, and office locations. The data also reportedly links agencies to surveillance tools. TechCrunch reported that a hacker known as “Department of Peace” accessed the information through Okta, an identity and access management service used by DHS.

Around 21,000 records concern CBP employees, while nearly 7,000 belong to ICE staff. The data also includes records from the Cybersecurity and Infrastructure Security Agency (CISA), US Citizenship and Immigration Services (USCIS), and Homeland Security Investigations (HSI).

The dataset reportedly includes information about DHS groups with access to tools such as Mobile Fortify, a facial recognition app, and PenLink, which can collect and analyze data from phones and online services. The leaked information was reportedly given to cybersecurity researcher maia arson crimew, who shared it with the nonprofit Distributed Denial of Secrets (DDoSecrets), which is hosting the “Icepick” dataset.

DHS did not immediately respond to The Verge’s request for comment. The leak follows a separate incident in which hackers stole data on FBI employees and job applicants.