GoKawiilHacker exposes 41,000 DHS employee records via Okta breach
A hacker going by 'Department of Peace' accessed Okta, the identity management service used by the Department of Homeland Security, and stole personal data on more than 41,000 employees. The leaked records include names, job titles, phone numbers, emails and office locations for staff at CBP, ICE, CISA, USCIS and HSI, and also reveal which DHS groups have access to surveillance tools like Mobile Fortify and PenLink. The data was passed to researcher maia arson crimew and published by the nonprofit Distributed Denial of Secrets as the 'Icepick' dataset.
GoKawiil's interpretation of the reporting above, not reported fact.
The breach could put thousands of federal law enforcement and immigration employees at risk of targeted harassment or phishing, given how specific the exposed data is. It also reveals internal structures showing which agency units have access to powerful surveillance technology, information that could be exploited by bad actors or used by privacy advocates to scrutinize government surveillance practices. The incident raises questions about the security of third-party identity management tools like Okta used across federal agencies.
- Over 41,000 DHS employee records were stolen, including from CBP, ICE, CISA, USCIS and HSI.
- The breach occurred through Okta, the identity and access management service used by DHS.
- The leaked 'Icepick' dataset also exposes which agency groups have access to surveillance tools like Mobile Fortify and PenLink.
YubiKey 5C NFC Security Key — In light of breaches involving identity and access management systems like Okta, using hardware-based multi-factor authentication is one of the strongest ways to protect your own accounts. The YubiKey 5C NFC lets you add phishing-resistant two-factor authentication to your email, cloud, and work accounts in seconds. It's a simple, durable way to keep your personal data safer even when large organizations get breached.
See YubiKey 5C NFC Security Key on Amazon → Affiliate link — we may earn a commission on purchases, at no extra cost to you. Product picked by AI based on this article; it is not a tested recommendation.Source: theverge.com — Emma Roth, 2026-10-28
Published there as: “A hacker stole more than 40,000 DHS employee records”
Read the original report → The summary and analysis above are GoKawiil's own, written from reporting by the source above. Facts and quotes belong to the original publisher.