GoKawiilLeak exposes login data and tool access for 41,000 DHS staff
Distributed Denial of Secrets published an archive called 'Icepick' containing login records for more than 41,000 Department of Homeland Security employees and contractors across DHS and seven component agencies, including ICE and CBP. The files include contact details and over 55,000 permission groups showing which surveillance and investigative systems—such as Palantir's Falcon, PenLink, and wiretap programs—each person can access, with records last updated in August. DDoSecrets says the data came from DHS's Okta login system, a claim Okta disputes, stating it has no evidence of a breach.
GoKawiil's interpretation of the reporting above, not reported fact.
The leak could reveal the identities of undercover agents and the specific surveillance capabilities tied to individual offices, which privacy advocates may argue aids public accountability while security officials could see it as endangering personnel and ongoing operations. The dispute over the data's origin—DDoSecrets pointing to Okta, Okta denying compromise—suggests uncertainty remains about how such sensitive internal access records were obtained. The scope of tools named, from phone-extraction systems to wiretap programs, indicates how extensively DHS relies on third-party surveillance platforms for immigration enforcement.
- DDoSecrets published login and permission data for over 41,000 DHS employees and contractors in an archive called 'Icepick.'
- The data reveals access to tools like Palantir's Falcon, PenLink, and wiretap programs, and identifies some employees in 'certified undercover operation' groups.
- Okta disputes that its systems were the source of the leaked data, while DDoSecrets maintains it came from DHS's Okta login system.
YubiKey 5C NFC Security Key — Given this massive leak of employee credentials and login records, it's a stark reminder of why hardware-based two-factor authentication matters for anyone managing sensitive accounts. A YubiKey adds a physical layer of security that can't be phished or leaked like a password database, protecting your own accounts even if a service you use gets breached.
See YubiKey 5C NFC Security Key on Amazon → Affiliate link — we may earn a commission on purchases, at no extra cost to you. Product picked by AI based on this article; it is not a tested recommendation.Source: techspot.com — Skye Jacobs, 2026-10-29
Published there as: “Hackers leak details of 41,000 Homeland Security employees, exposing undercover operations and surveillance tools”
Read the original report → The summary and analysis above are GoKawiil's own, written from reporting by the source above. Facts and quotes belong to the original publisher.