In a breach that has drawn comparisons to earlier disclosures such as BlueLeaks, a trove of personal information belonging to more than 41,000 staff members of the U.S. Department of Homeland Security (DHS) was made publicly accessible. The dump includes the names, work addresses, and phone numbers of agents from Immigration and Customs Enforcement (ICE), Customs and Border Protection (CBP), and several other DHS components, exposing the identities of thousands of officials tasked with enforcing immigration policy.

Scope of the leak

The released database, dubbed Icepick, contains detailed records for a wide range of DHS personnel. More than 21,000 of the entries belong to CBP employees, while nearly 6,600 are ICE agents. Additional files list staff from Homeland Security Investigations, the Federal Protective Service, and the Cybersecurity and Infrastructure Security Agency. Beyond basic contact information, the leak also reveals dozens of previously unknown operation names, the agents leading those missions, and the technology they employed, including tools from Cellbrite and Palantir.

How the data was released

The information was uploaded on a Wednesday by a collective calling itself the Department of Peace, in collaboration with cybersecurity researcher and hacker known as maia crimew. The data was shared through a website operated by Distributed Denial of Secrets (DDoSecrets), a platform that has previously hosted large‑scale disclosures of government documents. According to the group’s statement, the aim was not to create a comprehensive directory of every DHS employee but to replace "anonymity with accountability" for officials overseeing covert and controversial operations.

Implications for security and accountability

While the leak does not appear to include classified material, the exposure of personal identifiers raises immediate security concerns. Agents who often work with their faces covered and without visible identification may now be more vulnerable to retaliation or intimidation. The disclosure also sheds light on the internal mechanisms of DHS, including the use of a single‑sign‑on service called Okta to manage access to employee profiles. Okta has responded that it is aware of the claims and has found no evidence that its systems were compromised, but the incident underscores the risks inherent in centralized authentication platforms.

Response from agencies

A DHS spokesperson did not immediately comment on the breach. Okta, the authentication provider mentioned in the leak, issued a brief statement confirming its security measures and denying evidence of a compromise. The Department of Peace, in its online statement, linked the leak to recent political pressure on ICE, citing a comment from Representative Markwayne Mullin about "turning up the heat" on immigration enforcement.

Broader context

This incident marks the third government‑related data exposure in recent weeks, following a hack of the FBI by the group ShinyHunters and a suspected attack on the Federal Election Commission that temporarily took the agency offline. The timing coincides with heightened public scrutiny of U.S. immigration enforcement, especially after a surge in arrests and deportations under the Trump administration’s renewed policies. Critics have highlighted incidents where ICE agents, often masked and unidentifiable, have used lethal force, raising questions about transparency and oversight.

Agencies affected (selected)

As the investigation unfolds, the leak serves as a reminder of the delicate balance between governmental secrecy, operational security, and the public’s right to know who is executing controversial policies. Whether the exposure will prompt reforms in data handling or lead to increased scrutiny of DHS operations remains to be seen.