Reported by 1 source

The short version

  • The Department of Homeland Security formally requested that FlokiNET remove or restrict access to a database containing details on more than 40,000 agency personnel.
  • FlokiNET’s leadership declined the request, stating the data consisted of professional contact information rather than private home addresses or personal phone numbers.
  • A group calling itself the Department of Peace claimed responsibility for the breach, asserting that releasing employee data was a reciprocal measure against DHS enforcement actions.

The Department of Homeland Security has escalated its response to a significant data breach involving its workforce by formally requesting that an Icelandic internet hosting company remove or limit access to a newly published database. The agency’s request, made public on Thursday, argues that the exposed information places more than 40,000 identifiable individuals at serious risk of harassment, stalking, and physical harm. This development marks a critical juncture in the ongoing incident, as federal officials attempt to mitigate potential threats against their staff while navigating the complexities of international hosting providers and digital transparency advocates.

The data in question was initially released on Wednesday by DDoSecrets, a non-profit organization dedicated to data transparency. Alongside the main release, a separate, searchable database developed by an individual identified as “maia arson crimew” was made available online. Although the primary database became briefly inaccessible on Thursday, it was quickly republished under a different domain name, demonstrating the resilience of the distribution network and the difficulty of permanently suppressing such information once it enters the public sphere.

News Journal

The formal takedown request was submitted to FlokiNET, an Icelandic hosting provider known for its stance on free speech and resistance to censorship. The request was facilitated by ZeroFox, a cybersecurity firm authorized by U.S. Immigration and Customs Enforcement to pursue content removal actions. In an email to FlokiNET, ZeroFox cited the specific figure of over 40,000 affected individuals, emphasizing the scale of the potential danger to government employees. This coordination between DHS, ICE, and private security firms highlights the multi-layered approach federal agencies are taking to manage digital threats.

Despite the urgency conveyed in the request, FlokiNET has refused to remove the data. Kolja Weber, the CEO of FlokiNET, stated that his company would not comply with the takedown order because the database contains government employee work addresses and work phone numbers. He distinguished this professional contact information from personal home addresses and private phone numbers, implying that the risk profile cited by DHS does not align with the nature of the data hosted on his servers. This distinction is central to the conflict between federal security concerns and hosting provider policies regarding public interest data.

A group calling itself “the Department of Peace” has claimed responsibility for obtaining and releasing the data. In a statement issued on Wednesday, the group justified its actions by asserting that DHS employees possess personal information about citizens, making it fair for the public to have access to employee details in return. The group stated that they hoped the released data would be used to limit further harm caused by DHS operations and expressed support for all efforts directed toward that goal. This narrative frames the leak not merely as a cyberattack, but as a political act of retaliation against immigration enforcement practices.

A spokesperson for the Department of Homeland Security acknowledged the situation, stating that the agency is aware of a potential breach and is actively working to address it swiftly and effectively. The spokesperson emphasized that DHS takes all security threats against its employees and officers seriously and committed to ensuring proper protection for all personnel. This official response underscores the gravity with which the agency views the incident, even as it navigates the practical challenges of securing digital assets in an era of persistent cyber vulnerabilities.

The breach has reignited broader debates regarding privacy and government surveillance. Privacy advocates have previously criticized DHS for its use of personal data from other agencies, including Medicaid records and taxpayer information, for immigration enforcement purposes. The release of employee data adds a new dimension to these concerns, highlighting the reciprocal nature of data exposure in the digital age. As the agency works to protect its workforce, the incident serves as a stark reminder of the vulnerabilities inherent in large-scale government data management systems.

Looking ahead, the situation remains fluid. While FlokiNET has refused the initial takedown request, DHS continues to monitor the situation and explore other avenues for mitigation. The republishing of the database on alternative domains suggests that complete removal may be unlikely. Federal agencies are likely to review their internal security protocols and communication strategies in light of this breach. The incident also raises questions about the long-term safety of government employees whose professional contact information is now widely accessible, potentially exposing them to targeted harassment or intimidation.

The conflict between DHS and FlokiNET illustrates the growing tension between national security priorities and the principles of digital transparency. As hosting providers in jurisdictions with strong free speech protections resist takedown requests, federal agencies face increasing challenges in controlling the dissemination of sensitive information. This case may set a precedent for how future data breaches involving government personnel are handled, particularly when hosted on international servers that prioritize user privacy and freedom of expression over corporate or governmental pressure.

In the immediate term, DHS employees may be advised to exercise caution regarding their professional contact information. The agency’s commitment to protecting its workforce will be tested as it balances operational security with the reality of an increasingly interconnected digital landscape. The outcome of this standoff could influence broader policies on data protection and cybersecurity within federal agencies, prompting a reevaluation of how sensitive personnel information is stored, accessed, and secured against unauthorized disclosure.

Sources behind this briefing

Go to the original reporting