Data on more than 40,000 DHS employees leaked online

What happened

On Wednesday, the leak site Distributed Denial of Secrets published an archive it calls “Icepick,” describing personnel records for more than 41,000 Department of Homeland Security employees and contractors. DDoSecrets said the material came from an unnamed source it called the “Department of Peace,” and that the data was taken from DHS’s Okta login system. The records were last updated on August 19, 2026, according to Wired.^{⁠[3, 4, 12]}

The files include names, job titles, phone numbers, email addresses, office locations, supervisors, and permission groups. Wired and CNBC reported the set covers DHS headquarters and component agencies, including CBP (more than half of the records in Wired’s count), ICE (about 10,000 in Wired; Fox sources said roughly 10,000 ICE and more than 20,000 CBP), USCIS, and CISA. Wired said groups in the data reference undercover work, wiretap and intercept programs, Palantir software, and an eight-person “Grok.com” access group. Okta said it had no evidence its systems were compromised. A DHS spokesperson said the department was aware of a potential breach, was working to address it, and takes threats against employees seriously.^{⁠[3, 4, 7, 12]}

Background

DDoSecrets and researcher maia arson crimew previewed the files for Wired. DDoSecrets co-founder Emma Best said a search tool was meant to “replace anonymity with accountability.” A note with the files said DHS employees “have our information, so it’s only fair that we have theirs.” The Guardian reported this as the third prominent government data disclosure in about a month, after a claimed FBI-related theft by ShinyHunters and a Pentagon personnel-records incident. Coverage also placed the leak amid disputes over ICE and CBP agents working without visible identification and over DHS efforts to unmask critics.^{⁠[3, 7, 12]}

How the coverage differs

Left-leaning outlets (NPR, Raw Story, The Guardian) stressed unmasking of ICE and related staff, DDoSecrets’ fairness argument, and DHS moves to keep agents anonymous while seeking critics’ identities. The Guardian highlighted the third leak in a month and that DHS did not immediately comment to it. Center outlets (CNBC, The Hill) focused on a searchable database of names, titles, agencies, and offices and on DDoSecrets not naming the source. Right-leaning Fox News framed a “catastrophic” investigation, undercover ICE names, an “anti-fascist” claim of responsibility, and risk to officers; the New York Post headline stressed surveillance and human-intelligence roles. Wired, TechCrunch, and The Verge detailed facility locations, cell numbers, and software-tied groups more than most political outlets.^{⁠[1, 2, 3, 4, 5, 7, 8, 12]}

What's still unclear

How the data was obtained, whether Okta or another system was the actual source, and how much of the archive is authentic remain disputed. Reuters, cited by The Guardian, matched some records but could not verify the whole set. Counts of ICE versus CBP staff differ slightly across reports. DHS has not publicly detailed the investigation’s findings. Whether publishing work contact details constitutes doxing or a crime is contested in comments quoted by Wired.^{⁠[3, 7, 12]}

Written by Grok from the full articles, at a reader's request. AI can get details wrong; check the sources.