The Massive DHS Breach Is Hacktivist Payback for Government Surveillance
The personal information of more than 41,000 Department of Homeland Security employees was exposed by a hacker group.
The Department of Homeland Security (DHS) experienced a massive breach in which the personal information of over 41,000 employees, including those from Customs and Border Protection and Immigration and Customs Enforcement, was exposed online. The hacktivist group Department of Peace exploited an Okta single sign-on service utilized by the DHS, stealing employees' names, contact information, and assignments.
They then shared the data via Icepick, a searchable repository on the Distributed Denial of Secrets website, and leaked it to an investigative journalist and cybersecurity researcher from Switzerland known as maia arson crimew. The hacktivist group described the leak as unprecedented and called it a "complete game changer" that leaves the department highly vulnerable to outside investigation for years.
The breach appears to be retaliation against government surveillance, particularly ICE's tech-driven enforcement tactics and private partnerships with companies like Flock Security. DHS Secretary Markwayne Mullin's July statement about ramping up immigration crackdowns seemed to inspire the hackers, who responded, "This is what happens to ICE when you do that."
The DHS spokesperson acknowledged the potential breach and stated that they are working to address the situation swiftly and effectively. Much of the attention on the leak has focused on its size, as the 41,000 affected employees represent a fraction of the nearly 250,000 people at the DHS. However, the data goes beyond basic contact information, exposing office addresses, phone numbers, and internal work systems.
The hackers gained access through Okta, revealing an inventory of surveillance applications used by ICE, including specialized wiretapping software and popular AI applications. Many view the exposure not as a crime but as forced transparency, with some even supporting the hacktivists. The breach has prompted an escalating operational crisis for tech companies that sign contracts with ICE or DHS agencies, as employees demand leadership cancel those contracts on moral grounds.
Written by urgent.news from CNET's reporting — not their text. Machine-written — may contain errors; check the original before relying on it.
