# Massive Data Leak Exposes 41,000 DHS Employees' Details, Raising Security Concerns

*Published November 2, 2026*
*Source: [https://www.bitdefender.com/en-us/blog/hotforsecurity/hackers-leak-41-000-dhs-staff-data](https://www.bitdefender.com/en-us/blog/hotforsecurity/hackers-leak-41-000-dhs-staff-data)*

## Executive Summary

*This is a Premium edition. The Executive Summary is available to sec-news.ai members —*
*[read it here](https://www.sec-news.ai/news/massive-data-leak-exposes-41-000-dhs-employees-details-raising-security-concerns) or [see plans](https://www.sec-news.ai/pricing).*

## Article

Over 41,000 employees of the U.S. Department of Homeland Security have had their personal information leaked online by a hacktivist group known as 'Department of Peace'. The exposed data includes names, job titles, work email addresses, phone numbers, and office locations. This breach affects a wide range of personnel, including members of Immigration and Customs Enforcement (ICE), Customs and Border Protection (CBP), and the Cybersecurity and Infrastructure Security Agency (CISA).

A significant portion of the compromised records belong to CBP employees, who are essential to operations at airports, seaports, and border crossings. The breach also affects around 10,000 ICE staff and nearly 1,000 CISA members. Alarmingly, the leak includes information on undercover agents and those engaged in sensitive activities such as wiretapping and communication interception.

The hacktivist group claims to have extracted the data from Okta's single sign-on system used for accessing the DHS central network. Despite these claims, Okta reports no evidence of a breach in its own systems. The leaked data also reveals the tools and services accessible to DHS staff, including Palantir's Falcon platform and the PenLink analysis tool.

Named 'Icepick', this leak has been made available online, both as a torrent download and via a searchable web interface, posing severe risks to national security. There is significant concern that adversaries could exploit this information to identify vulnerable personnel or disrupt ongoing operations. Additionally, the exposed contact details could be used for phishing attacks, putting agents at risk of both digital and physical threats.

This incident follows a series of cybersecurity breaches targeting U.S. government agencies, highlighting the persistent threat to national security from cyberattacks. Organizations must remain vigilant, implementing robust cybersecurity measures to protect sensitive information and mitigate future risks.