DHS Investigates Possible Data Breach Exposing More Than 40,000 Employees
14 hours ago
The Department of Homeland Security is investigating a potential data breach after a leak website published personal and professional information belonging to more than 40,000 federal employees, including immigration agents and personnel working in sensitive law enforcement operations.
The exposed records reportedly include employee names, job titles, phone numbers, email addresses, office locations and details about assignments within the department.
According to reports published Wednesday, the leaked information involves employees from several DHS agencies, including Immigration and Customs Enforcement (ICE), Customs and Border Protection (CBP), Homeland Security Investigations and the Cybersecurity and Infrastructure Security Agency (CISA).
More than 21,000 records are associated with Customs and Border Protection personnel, while thousands of others involve ICE employees and investigators.
Some records reportedly identify personnel assigned to undercover operations, surveillance, computer forensics and other sensitive law enforcement activities.
The information was published by Distributed Denial of Secrets, a nonprofit organization that distributes leaked documents and datasets.
A hacking group calling itself the Department of Peace has claimed responsibility for obtaining the information.
The group alleges that the records were taken from a single sign-on system used by DHS employees and contractors to access internal government applications.
However, the precise circumstances surrounding the alleged breach have not been independently established.
Okta, the technology company whose authentication services were reportedly involved, said it has no evidence that its own systems or data were compromised.
In a statement, DHS acknowledged the potential breach and said officials are working to address the situation.
"DHS is aware of a potential breach and is actively working to address the situation swiftly and effectively," a department spokesperson said.
The agency added that it takes security threats against employees and officers seriously and is working to ensure personnel are protected.
The disclosure has raised concerns about potential threats to federal law enforcement officers, particularly those working undercover or conducting sensitive investigations.
Exposing employee identities and assignments could also create opportunities for harassment, impersonation or attempts to compromise ongoing operations.
Reuters reported that it was able to verify some employee information contained in the leaked records, although the authenticity of the entire dataset has not been established.
The reported breach comes amid broader concerns about cybersecurity vulnerabilities across federal agencies.
Recent incidents involving the FBI and Department of Defense have also raised questions about the protection of government personnel information.
DHS has not publicly confirmed how the information was obtained, whether the vulnerability has been addressed or how many employees may ultimately be affected.
The department says it will provide additional information as its investigation continues.
The exposed records reportedly include employee names, job titles, phone numbers, email addresses, office locations and details about assignments within the department.
According to reports published Wednesday, the leaked information involves employees from several DHS agencies, including Immigration and Customs Enforcement (ICE), Customs and Border Protection (CBP), Homeland Security Investigations and the Cybersecurity and Infrastructure Security Agency (CISA).
More than 21,000 records are associated with Customs and Border Protection personnel, while thousands of others involve ICE employees and investigators.
Some records reportedly identify personnel assigned to undercover operations, surveillance, computer forensics and other sensitive law enforcement activities.
The information was published by Distributed Denial of Secrets, a nonprofit organization that distributes leaked documents and datasets.
A hacking group calling itself the Department of Peace has claimed responsibility for obtaining the information.
The group alleges that the records were taken from a single sign-on system used by DHS employees and contractors to access internal government applications.
However, the precise circumstances surrounding the alleged breach have not been independently established.
Okta, the technology company whose authentication services were reportedly involved, said it has no evidence that its own systems or data were compromised.
In a statement, DHS acknowledged the potential breach and said officials are working to address the situation.
"DHS is aware of a potential breach and is actively working to address the situation swiftly and effectively," a department spokesperson said.
The agency added that it takes security threats against employees and officers seriously and is working to ensure personnel are protected.
The disclosure has raised concerns about potential threats to federal law enforcement officers, particularly those working undercover or conducting sensitive investigations.
Exposing employee identities and assignments could also create opportunities for harassment, impersonation or attempts to compromise ongoing operations.
Reuters reported that it was able to verify some employee information contained in the leaked records, although the authenticity of the entire dataset has not been established.
The reported breach comes amid broader concerns about cybersecurity vulnerabilities across federal agencies.
Recent incidents involving the FBI and Department of Defense have also raised questions about the protection of government personnel information.
DHS has not publicly confirmed how the information was obtained, whether the vulnerability has been addressed or how many employees may ultimately be affected.
The department says it will provide additional information as its investigation continues.
