Distributed Denial of Secrets (DDoSecrets) published an archive Oct. 28 that it says identifies more than 41,000 Department of Homeland Security (DHS) employees, placing reported contact and assignment details in public view while the archive’s full scope remains unverified.
DDoSecrets calls the collection Icepick and says the records came from an Okta sign-on service used by DHS. Reuters reported it could not confirm that account. Okta said it had no evidence its own systems or data were compromised.
Nextgov/FCW reported that DHS was aware of a “potential breach” and was working on a response. The agency said it would provide more information when available; the report did not specify when it would issue another update.
The archive includes names, contact information and work assignments, according to DDoSecrets. Reuters reported that listed organizations include Immigration and Customs Enforcement (ICE), Customs and Border Protection (CBP), Homeland Security Investigations, the Cybersecurity and Infrastructure Security Agency (CISA) and other DHS components. Some entries describe work involving surveillance, computer forensics or undercover work.
DDoSecrets describes the people in the archive as DHS employees. Nextgov/FCW said the records include current and former employees and contractors. The reports do not reconcile those descriptions or establish how many entries are unique or current.
Reuters said its checks matched information for six employees against credit-bureau records and breach data. Three employees it contacted confirmed phone numbers and other details. Nextgov/FCW reported that it checked one official’s work number against information it had obtained separately, found several listed numbers linked to AT&T, and matched some entries to LinkedIn profiles. It said some records appeared historical.
DDoSecrets said a group using the name Department of Peace provided copies to the publisher and journalist maia arson crimew. A spokesperson for the group presented the release as a response to DHS Secretary Markwayne Mullin’s pledge to intensify immigration enforcement. That is the group’s stated rationale.
DDoSecrets said the archive could aid journalism, congressional inquiries and public-records requests. Nextgov/FCW reported that personnel details and work connections could also help malicious actors select targets or impersonate employees.
