A hacker stole a trove of personal information from the Department of Homeland Security (DHS). The breach exposes the names, job titles, phone numbers, email addresses, and office locations of more than 41,000 employees, including those in US Immigration and Customs Enforcement (ICE) and Customs and Border Protection (CBP), according to TechCrunch and Wired. The data also linked the agencies to specific surveillance tools.
As reported by TechCrunch, a hacker known as “Department of Peace” gained access to the data through Okta, an identity and access management service used by the DHS. Around 21,000 records pertain to CBP employees, and nearly 7,000 belong to staff at ICE. The data also includes records from the Cybersecurity and Infrastructure Security Agency (CISA), US Citizenship and Immigration Services (USCIS), and Homeland Security Investigations (HSI).
The leaked DHS information was reportedly given to cybersecurity researcher maia arson crimew, who shared it with Distributed Denial of Secrets (DDoSecrets), a nonprofit organization that’s now hosting the leaked “Icepick” dataset. The leak also reportedly includes information about DHS groups that have access to tools that can be used for surveillance, such as the facial recognition app Mobile Fortify and PenLink, which can collect and analyze data from phones and online services.
The DHS didn’t immediately respond to The Verge’s request for comment.