Hacktivists Expose Data of 40,000 DHS Workers

More than 40,000 employees of the U.S. Department of Homeland Security had their personal details published online Wednesday.

The breach exposed names, phone numbers, and addresses for agents, operatives, and associates. Some of these individuals worked in undercover roles. The group responsible, which calls itself the Department of Peace, claimed responsibility in an online statement. A spokesperson cited a remark by Markwayne Mullin from July 17, stating, "This is what happens to ICE when you do that."

The hackers accessed the data by subverting DHS's single sign-on system. They passed the material to Distributed Denial of Secrets, or DDoSecrets, which published it in a database called Icepick. The group also shared the data with U.S. journalist Ryan Ottignon and a Swiss hacker known as maia arson crimew. Ottignon and crimew built a searchable online database, with crimew handling the technical work.

DDoSecrets cofounder Emma Best described the leak as "extraordinary but deceptive in its simplicity." She noted that the records draw explicit links to officials who oversee covert operations and key personnel in rendition and deportation programs. Other activists argued the data could help researchers who often receive little useful information from freedom of information requests.

DHS issued a statement saying it is "aware of a potential breach and is actively working to address the situation swiftly and effectively." The department added that it is taking necessary steps to ensure all are properly protected.

The records identify more than 21,000 employees of U.S. Customs and Border Protection. Roughly 10,000 more relate to Immigration and Customs Enforcement employees and its Homeland Security Investigations unit. The database covers about a fifth of the DHS workforce, which totals a little more than 220,000 people. This incident follows similar hacking attacks at the FBI.

Ottignon rejected the idea that the release amounts to doxing government employees. He pointed to public officials who travel in plain clothes and masks while performing what he called "universally unspeakable things" to communities. Ottignon described the database as one step in an oversight process, saying, "We need oversight for useful government, if it exists at all." A note attached to the files by DDoSecrets reads: "They have our information, so it's only fair that we have theirs."