US Immigration Agents’ Details Leaked in Major Hack Exposing 41,000 DHS Workers
US Immigration Agents’ Details Leaked in Major Hack Exposing 41,000 DHS Workers
A major data leak has exposed information linked to more than 41,000 employees and contractors working for the United States Department of Homeland Security (DHS). The incident has raised concerns about staff safety, sensitive government operations and the security of federal information systems.
The leaked records reportedly include names, work contact details, job titles, office locations and information about employees’ roles. Some entries also reveal connections to undercover investigations and surveillance programmes.
The records were published online on Wednesday, October 28, 2026. The Department of Homeland Security has acknowledged a potential security breach and said it is working to address the situation.
More Than 41,000 Employee Records Exposed
The leaked information reportedly covers personnel across several DHS agencies. These include Immigration and Customs Enforcement (ICE), Customs and Border Protection (CBP), and US Citizenship and Immigration Services (USCIS).
The database, named Icepick, contains information that could help researchers understand how different parts of the department are organised.
According to reporting by The Washington Post and WIRED, the published records include contact information, job responsibilities, supervisors and access groups associated with internal government systems.
The database also reportedly contains references to specialised investigative tools and undercover activities. This has increased concern that the leak could expose more than ordinary workplace information.
However, the publishers have acknowledged that the database may be incomplete and could contain inaccuracies. The full extent of the security impact remains uncertain.
Hacktivist Group Claims Responsibility
A group calling itself the Department of Peace has claimed responsibility for obtaining the information.
The group reportedly said it accessed Department of Homeland Security records through an employee sign-in system. It subsequently shared the material with Distributed Denial of Secrets, a nonprofit organisation that publishes leaked documents, and Swiss hacker and journalist maia arson crimew.
The records were then made available through a searchable online database.
The group presented the release as an effort to increase transparency and public scrutiny of immigration enforcement. Its actions come amid continuing debate over the Trump administration’s immigration policies and the conduct of federal enforcement officers.
However, the group’s claims about how it obtained the information have not established the precise technical cause of the incident.
Technology company Okta, whose login system was identified in reports about the leak, said it had no evidence that its systems or data had been compromised. This distinction is important because the source of the breach remains a central question.
DHS Warns of Risks to Employees
The Department of Homeland Security has said it is aware of a potential breach and is working to protect affected personnel.
The department has also warned that exposing officers’ identities and work details could put employees and their families at risk.
Former senior immigration officials have expressed concern that the publication could threaten personnel and interfere with criminal investigations.
Some employees work on cases involving organised crime, drug trafficking and other serious offences. Revealing their professional relationships or operational responsibilities could make them more vulnerable to threats, impersonation attempts or targeted harassment.
On Thursday, DHS sought to have the leaked information restricted or removed from an Icelandic hosting provider, arguing that the publication placed more than 40,000 identifiable people at risk of harassment, stalking and physical harm.
Reuters reported that the hosting provider declined to remove the material, arguing that the records contained employees’ work addresses and telephone numbers rather than their personal contact details.
Transparency Debate Intensifies
The leak has renewed debate over government accountability and the privacy of public employees.
Supporters of greater transparency argue that the public should be able to scrutinise government agencies, particularly when their actions affect immigration, civil liberties and law enforcement.
Critics of the publication warn that exposing large numbers of employees without considering individual circumstances can create serious security risks.
The two concerns are not necessarily mutually exclusive. Public accountability can involve reviewing official conduct and investigating allegations of misconduct without unnecessarily exposing sensitive information about individual workers.
The incident also raises questions about how government agencies protect employee records and restrict access to internal systems.
Investigation and Security Measures Continue
The Department of Homeland Security says it is responding to the potential breach, but several important questions remain unanswered.
Investigators still need to establish exactly how the information was accessed, whether unauthorised access is continuing and which records are accurate.
Officials must also assess whether the exposed information could affect active investigations or compromise sensitive operations.
The incident follows other reported cyberattacks involving US government personnel, adding to concerns about the protection of federal information.
For now, the leak has exposed a substantial amount of information about the people working within the US immigration and border enforcement system.
The investigation will determine how the breach occurred and what additional measures may be needed to protect government employees and sensitive operations.
About the Author
