The short version
- Personal information for over 40,000 Department of Homeland Security employees has been made public by the group Distributed Denial of Secrets.
- The disclosure follows two other significant government data breaches in September and October involving the FBI and the Department of Defense.
- While the source claims the data was harvested from an Okta sign-on service, Okta denies any compromise of its systems.
A significant volume of personal and professional data belonging to more than 40,000 employees of the Department of Homeland Security has been released to the public. The disclosure was made by Distributed Denial of Secrets, a non-profit organization focused on data transparency. This event marks the third major government data leak to attract widespread attention in a single month, raising urgent questions about the security posture of federal agencies and the vulnerability of sensitive personnel records.
The released information includes names, phone numbers, and email addresses for workers across several key DHS components. These include Immigration and Customs Enforcement, Customs and Border Protection, Homeland Security Investigations, and the Cybersecurity and Infrastructure Security Agency. Beyond basic contact details, the dataset contains job titles and email group affiliations that reveal which agents are assigned to specialized roles such as surveillance, computer forensics, undercover operations, and special missions.
The transparency group attributes the origin of this data to an entity known as the Department of Peace. In a statement accompanying the release, the Department of Peace argued that because DHS possesses extensive information on citizens, it is equitable for the public to have access to employee records. The group stated its intention was to use the data to limit further harm caused by the department and to support efforts aimed at curbing its operations. This follows a previous claim in March where the same entity took responsibility for hacking DHS systems to expose vendor contracts.
Emma Best, co-founder of Distributed Denial of Secrets, announced that a hacktivist operating under the handle 'maia arson crimew' created a search tool to allow public browsing of the dataset. Best described the initiative as a method to replace anonymity with accountability. She suggested the tool would empower journalists, facilitate public records requests, and enhance congressional oversight capabilities regarding federal agency activities.
The technical origin of the breach remains contested. The Department of Peace asserted that the data was harvested from Okta, a cloud-based identity and access management service used by DHS for sign-on purposes. However, Okta responded to inquiries by stating that its systems are secure and that it has no evidence of any compromise involving its data or infrastructure. Independent verification of the technical claims regarding the breach vector has not been fully established.
Journalistic efforts to verify the authenticity of the leaked information have yielded mixed results. Reporters were able to match personal details for approximately six named DHS employees against credit bureau records and breach data hosted on dark web intelligence platforms. In other instances, direct phone calls to listed numbers confirmed the accuracy of contact information. One employee contacted stated they had no prior knowledge of any security breach affecting their data.
While some of the exposed information appears to overlap with details already available on professional networking sites like LinkedIn, other portions reveal nonpublic insights. These include internal organizational charts and previously undisclosed programs or operations within the department. The inclusion of such sensitive operational details suggests a deeper penetration into internal systems than simple public record aggregation.
This incident occurs against a backdrop of escalating cybersecurity concerns for federal institutions. In September, the hacking group ShinyHunters claimed responsibility for stealing a massive trove of data from the Federal Bureau of Investigation, which included sensitive job details and medical information for thousands of agents. Just last week, the Department of Defense faced a class action lawsuit following a breach that exposed data on millions of current and former military personnel.
The Department of Homeland Security did not immediately respond to requests for comment regarding the latest disclosure. The rapid succession of these breaches highlights systemic vulnerabilities across multiple branches of the federal government. As investigations continue, the focus remains on determining the extent of the damage and implementing measures to prevent further unauthorized access to sensitive government data.
The release of this data underscores the growing tension between government secrecy and public transparency advocates. While proponents argue that such disclosures are necessary for accountability, critics warn of the potential risks to employee safety and national security operations. The coming weeks will likely see increased legislative scrutiny and demands for improved cybersecurity protocols across federal agencies.
Sources behind this briefing
Go to the original reporting
- The Guardian US Politics↗Non-profit group leaks data of more than 40,000 homeland security workers
