A group calling itself the Department of Peace breached an Okta single sign-on system used by the Department of Homeland Security, stealing names, contact details and job assignments for more than 41,000 employees, including CBP and ICE workers. The stolen data was published in a searchable tool called Icepick on the Distributed Denial of Secrets site, built with help from researcher maia arson crimew. DHS confirmed it is aware of a 'potential breach' and is working to address it.
cnet.com
· 2026-10-29
A data leak has exposed personal and professional information belonging to more than 41,000 Department of Homeland Security employees, according to a report. The exposed records reportedly include names, phone numbers, job titles, and work assignments for staff across agencies such as ICE and CBP.
gizmodo.com
· 2026-10-29
After a hacker reportedly stole over 40,000 DHS personnel records including names and work contact details, DDoSecrets published the leaked dataset. Bluesky responded by blocking links to the DDoSecrets site, marking them as malicious, while DHS said it was investigating a potential breach.
techcrunch.com
· 2026-10-29
A hacking group called Department of Peace obtained records on more than 41,000 Department of Homeland Security employees and contractors, including staff at ICE and CBP, and leaked them to transparency nonprofit DDoSecrets, which published the trove as 'Icepick.' The data includes emails, phone numbers, office addresses and details on internal systems and surveillance programs, reportedly pulled from DHS's Okta login system, though Okta says it has found no evidence of a breach.
arstechnica.com
· 2026-10-29
Bluesky is preventing users from opening links to a leaked archive, published by Distributed Denial of Secrets, containing records on over 41,000 DHS employees and contractors, including names, contact details and internal group affiliations. The platform labels the links "malicious" and says it blocked access to the files rather than removing individual posts, citing violations of its rule against sharing personal contact information without consent. The DDoSecrets homepage itself remains accessible, and at least one third-party app built on Bluesky's network still allows the archive link to load without warning.
wired.com
· 2026-10-29
A group calling itself Department of Peace, working with hacker maia crimew, published a database named Icepick containing names, work addresses, phone numbers and job descriptions for more than 41,000 Department of Homeland Security staff, including Immigration and Customs Enforcement and Customs and Border Protection agents. The data was hosted via Distributed Denial of Secrets, and the hackers say they obtained it through the Okta single sign-on service. DHS has not responded to requests for comment, and Okta says it has found no evidence its systems were compromised.
bbc.co.uk
· 2026-10-28
A data leak has surfaced containing records on over 41,000 Department of Homeland Security employees and contractors, including about 10,000 ICE personnel, according to Wired. The exposed information includes phone numbers, email and office addresses, reporting structures, and access permissions tied to surveillance and wiretapping tools, reportedly sourced from DHS's Okta login system and dated through August 19, 2026. Transparency group Distributed Denial of Secrets published the archive, naming it 'Icepick,' after receiving it from a group calling itself the Department of Peace; Okta says it has found no evidence its systems were breached.
yro.slashdot.org
· 2026-10-28
A hacking group calling itself the Department of Peace claims to have obtained records on more than 41,000 Department of Homeland Security employees and contractors, including staff at ICE and CBP. The data, published Wednesday by transparency nonprofit Distributed Denial of Secrets under the name 'Icepick,' includes email addresses, phone numbers, office locations, and references to internal and surveillance systems, and reportedly originated from DHS's Okta login system. Okta says it has found no evidence its own systems were compromised.
wired.com
· 2026-10-28
A hacker going by 'Department of Peace' accessed Okta, the identity management service used by the Department of Homeland Security, and stole personal data on more than 41,000 employees. The leaked records include names, job titles, phone numbers, emails and office locations for staff at CBP, ICE, CISA, USCIS and HSI, and also reveal which DHS groups have access to surveillance tools like Mobile Fortify and PenLink. The data was passed to researcher maia arson crimew and published by the nonprofit Distributed Denial of Secrets as the 'Icepick' dataset.
theverge.com
· 2026-10-28
Defense attorneys for 15 Minnesota residents facing federal conspiracy charges have obtained internal DHS/ICE records—reports, intercepted Signal chats, emails, photos and database queries—documenting investigations codenamed Project Whipple Shield and Operation Puppet Master. The operations were authorized under National Security Presidential Memorandum 7, issued after Charlie Kirk's assassination, which directs federal agencies to use all available tools against critics of the administration and groups deemed 'anti-Christian.'
wired.com
· 2026-10-28
CNN reports the Pentagon has authorized the Department of Homeland Security to test and develop operational tactics for an 'active denial system,' a military-grade directed-energy weapon that can cause intense burning pain on skin from over half a mile away. The device, previously deployed but never used in combat by US forces in Afghanistan, has been loaned to DHS for seven months, with the Pentagon disclaiming responsibility for any resulting harm.
futurism.com
· 2026-10-23
New court filings reveal that Homeland Security Investigations flagged activist Samuel Tunick for suspected 'terrorist activities' before CBP agents stopped him at an Atlanta airport, but officers told him they were searching his phone for child sexual abuse material. Tunick, tied to the Stop Cop City protest movement, now faces up to five years in prison for allegedly wiping his GrapheneOS phone during the stop, under a rarely used law normally applied in cases like drug trafficking.
yro.slashdot.org
· 2026-10-20