A major data leak has exposed records identifying more than 41,000 employees and contractors of the U.S. Department of Homeland Security, including personnel working in immigration enforcement, border security, and sensitive federal investigations.
The exposed records reportedly include employee names, telephone numbers, email addresses, job titles, office assignments, and internal group memberships. More than 21,000 records are associated with U.S. Customs and Border Protection, while approximately 6,600 involve Immigration and Customs Enforcement personnel.
The leaked information was made available through a searchable database called Icepick. According to published reports, the records include references to undercover operations, surveillance activities, and specialized investigative units. Security experts warn that exposing these connections could create opportunities for impersonation, targeted attacks, and interference with federal investigations.
A group identifying itself as the Department of Peace claimed responsibility for obtaining the records through a single sign-on service used by DHS. The group alleged that the information came from a system associated with identity-management provider Okta. However, Okta said it had found no evidence that its own systems or data had been compromised. The precise method used to obtain the records has not been independently established.
DHS acknowledged that it was investigating a potential breach and working to address the situation. The incident comes amid heightened tensions surrounding federal immigration enforcement and concerns about the safety of government personnel whose identities become public. The organization responsible for publishing the records has characterized the disclosure as an effort to increase government transparency, while federal officials have warned that exposing personnel information can create serious security risks.
The full scope of the incident remains under investigation, including how the information was accessed and whether additional sensitive records were compromised. The exposure also underscores the potential consequences of unauthorized access to government personnel databases, particularly when employee identities, organizational relationships, and sensitive assignments can be connected through a single collection of records.
