DHS staff data breach reveals undercover ICE agents

Hacktivists calling themselves the Department of Peace have released personal details of more than 41,000 Department of Homeland Security employees, including names, offices, contact information and assignments, according to a report published on October 28.

The data set, dubbed “Icepick,” was obtained from an Okta single sign‑on system and handed to the transparency group Distributed Denial of Secrets (DDoSecrets) and Swiss hacker‑journalist maia arson crimew. DDoSecrets posted the full file on its platform, making the information publicly searchable.

The leak affects a wide range of DHS personnel, from administrative staff to field agents. Notably, the documents list individuals assigned to U.S. Immigration and Customs Enforcement (ICE) who work undercover, potentially compromising ongoing investigations and personal safety. The exposure also includes email addresses and phone numbers, which could be harvested for phishing or social engineering attacks.

The breach highlights the risk of credential theft from single sign‑on services. If attackers obtain valid login tokens, they can access internal systems and extract large volumes of data. While the hacktivists claim to have acted in the public interest, the release of personal data creates new opportunities for cybercriminals to target the affected employees with tailored scams.

Readers should treat any unexpected emails or calls from the listed DHS contacts with suspicion, especially if the communication asks for personal information, passwords, or money. Verify the sender’s identity through official channels before responding. Use strong, unique passwords for each online account and enable multi‑factor authentication wherever possible. Free tools on ComputerScams.com, such as the password strength checker and email checker, can help assess the security of your credentials.

If you receive a suspicious message that appears to come from a DHS employee, report it to the agency’s fraud hotline or the Federal Trade Commission. Regularly monitor your accounts for unusual activity and consider using a credit monitoring service if you suspect identity theft.

A practical step you can take right now is to change any password you have used for work‑related email or cloud services, ensuring it is long, random, and not reused elsewhere.

Source: Read the original report