Hacker leaks personal data on 40,000 DHS employees

A hacker using the name Department of Peace has published personal and work contact details for more than 40,000 US Department of Homeland Security (DHS) employees. The leaked records include names, job titles, email addresses, mobile numbers and office locations, affecting border and immigration agents, cybersecurity staff and senior officials. TechCrunch verified some records and said the database appeared to have been copied around mid-August; the leak represents about one-fifth of DHS’s 220,000 employees.

Around 21,000 records relate to Customs and Border Protection staff, about 10,000 to Immigration and Customs Enforcement and Homeland Security Investigations, and just under 1,000 to CISA. The hacker claims the data came from an Okta single sign-on system used to provide staff and contractors with access to DHS’s central network, but has not explained how the agency was breached.

The records also indicate access to services and tools including Microsoft 365, ChatGPT, Penlink surveillance software and CBP and ICE facial-recognition app Mobile Fortify.

DHS said it was aware of a potential breach and was investigating. Okta said it had no evidence that its systems or data were compromised. DDoSecrets said the database identifies personnel involved in covert operations, internal investigations and deportation programmes; researchers said the contact details could support targeted Freedom of Information Act requests. Exposing employees’ phone numbers and office locations also raises privacy and security risks.