# Hacker Compromises Over 40,000 DHS Employee Records via Okta Breach Sensitive data from ICE and CBP staff was exposed in a massive security incident. - **Source:** [The Verge](https://www.theverge.com) - **Published:** 2026-10-28 - **Topic:** [technology](https://brifing.si/c/technology) - **Original article:** - **On Brifing:** https://brifing.si/s/832f37f6-73b7-4294-bcff-75ec08840c81 ## Massive DHS Data Breach A hacker identified as Department of Peace successfully compromised the personal records of over 41,000 Department of Homeland Security employees. The stolen data includes names, job titles, phone numbers, email addresses, and office locations. This significant security failure impacts personnel across multiple critical agencies, marking a major breach within the federal government infrastructure. ## Okta Platform Vulnerability The unauthorized access was reportedly facilitated through Okta, an identity and access management service utilized by the DHS. By exploiting this specific entry point, the attacker bypassed security protocols to extract sensitive information. This incident highlights the inherent risks associated with centralized identity management systems when they become the primary target for sophisticated cyberattacks. ## Scope of Impacted Agencies The breach affects a wide range of departments, with 21,000 records linked to Customs and Border Protection and nearly 7,000 belonging to Immigration and Customs Enforcement staff. Additionally, the leak contains data from the Cybersecurity and Infrastructure Security Agency, US Citizenship and Immigration Services, and Homeland Security Investigations, exposing a broad spectrum of federal personnel. ## Surveillance Tools Exposed Beyond personal employee details, the leaked dataset links specific agencies to advanced surveillance technologies. Information regarding the facial recognition application Mobile Fortify and the data collection tool PenLink was included in the leak. These tools are capable of analyzing phone and online service data, raising concerns about the exposure of sensitive government operational capabilities. ## Motivation Behind the Attack The hacker justified the intrusion as a retaliatory measure against the DHS for its role in anti-immigration raids and tracking online critics. By leaking the identities of agents, the attacker aimed to create a sense of fairness regarding information transparency. This highlights the growing trend of politically motivated cyberattacks targeting government officials and agencies. ## Data Distribution Channels The stolen information was transferred to cybersecurity researcher maia arson crimew, who subsequently shared the files with the nonprofit organization Distributed Denial of Secrets. The data is currently hosted as the Icepick dataset. This distribution method ensures the leaked information remains accessible, complicating recovery efforts and increasing the long-term risks for the affected federal employees. ## Pattern of Federal Attacks This incident follows a similar breach occurring just weeks prior, where hackers successfully stole data regarding FBI employees and job applicants. The recurring nature of these attacks against high-profile government entities suggests a systemic vulnerability in how federal agencies manage digital identities and secure their internal networks against persistent, politically motivated threat actors targeting sensitive information. ## Institutional Response Status As of the latest reports, the Department of Homeland Security has not provided a formal response to requests for comment regarding the breach. The lack of immediate communication leaves questions about mitigation strategies and future security upgrades unanswered. Stakeholders must now monitor for further developments as the agency assesses the full extent of this compromise. ## Sources covering this story - https://www.theverge.com/tech/1021528/ice-cbp-data-leak — --- _Summary written by Brifing from the original reporting. Copyright in the original article belongs to its publisher; read the full piece at the link above._