# Massive Data Breach Exposes Thousands of US Immigration Personnel

Hackers leak sensitive DHS employee information to challenge agency anonymity and accountability.

- **Source:** [BBC News](https://www.bbc.co.uk/news/technology)
- **Published:** 2026-10-28
- **Topic:** [Software & Engineering](https://brifing.si/c/engineering)
- **Original article:** <https://www.bbc.co.uk/news/articles/cq8jzkpjr28vo?at_medium=RSS&at_campaign=rss>
- **On Brifing:** https://brifing.si/s/2ba5d05f-b66d-4b10-8932-be2e94eff798

## Unauthorized DHS Data Exposure

Personal details of over 41,000 Department of Homeland Security personnel were leaked online this Wednesday. The exposed records include names, work addresses, and phone numbers of staff from ICE and Customs and Border Protection. This breach represents a significant security failure involving sensitive government data hosted on a public database.

## Involved Hacking Groups

The leak was orchestrated by a group called the Department of Peace alongside hacker maia crimew. The data, titled Icepick, was distributed via a website hosted by Distributed Denial of Secrets. This incident follows a series of recent cyberattacks targeting various US government agencies, marking a period of heightened digital vulnerability.

## Scope of Compromised Records

The database contains information on 21,000 CBP agents and 6,600 ICE employees. Records also cover personnel from Homeland Security Investigations and the Cybersecurity and Infrastructure Security Agency. Beyond contact details, the leak reveals previously unknown operation names, lead agents, and specific technologies utilized, including tools provided by Cellbrite and Palantir.

## Okta Security Tool Involvement

The Department of Peace claims access was gained through a single sign-on service called Okta. While Okta is widely used to secure internal platform access, the company stated it has no evidence of a system compromise. The attackers specifically cited ICE actions as the primary motivation for targeting these internal records.

## Accountability Versus Anonymity

Emma Best of DDoSecrets stated the leak aims to replace agent anonymity with public accountability. The data identifies officials overseeing covert operations, deportation programs, and internal investigations into previous leaks like BlueLeaks. The hackers explicitly linked this action to recent political rhetoric regarding the escalation of immigration enforcement operations nationwide.

## Context of Immigration Enforcement

Public scrutiny of ICE has intensified following a surge in arrests and deportations since 2025. Reports indicate nearly 1 million deportations have occurred, with 70% involving individuals lacking criminal records. Immigration operations have frequently turned violent, resulting in multiple deaths, including high-profile incidents involving bystanders in Minnesota earlier this year.

## Operational Secrecy and Compliance

ICE agents frequently operate with covered faces and rarely identify themselves, despite legal requirements to do so. This lack of transparency has drawn public demands for stricter DHS enforcement of identification protocols. The leaked data exposes the individuals responsible for these covert tactics, potentially altering the dynamics of future immigration enforcement.

## Broader Cybersecurity Implications

This incident is the third major government hack in recent weeks, following attacks on the FBI and the Federal Election Commission. The recurring nature of these breaches highlights systemic weaknesses in federal digital infrastructure. As government agencies face increasing threats, the intersection of political activism and cyber warfare continues to evolve.

## Sources covering this story

- https://www.bbc.co.uk/news/articles/cq8jzkpjr28vo?at_medium=RSS&at_campaign=rss — 

---

_Summary written by Brifing from the original reporting. Copyright in the original article belongs to its publisher; read the full piece at the link above._
