Hackers leak data on 41,000 Homeland Security staff
A hacktivist group says it stole records on more than 41,000 DHS personnel, and the data now sits in a searchable online database, according to Engadget.

The facts
- According to Engadget, citing Wired, the Washington Post and NPR, a hacktivist group stole records on more than 41,000 Homeland Security personnel. The leak includes email addresses, phone numbers and office addresses, plus sensitive details on undercover and surveillance programmes.
- About 21,000 of the records are tied to Customs and Border Protection and 10,000 to ICE. That is roughly a seventh of the DHS workforce.
- The group apparently got in through Okta, the single sign-on service DHS uses. Okta told Wired it has found no evidence its own data or systems were compromised.
- DHS says it is aware of a potential breach and is working on it. Distributed Denial of Secrets, which published a searchable database called Icepick, has not been contradicted so far, but the full scope is unconfirmed.
Case notes · Danny's take
Why it matters
Single sign-on is one door to many rooms. If the door is compromised, or the credentials behind it are, everything behind it is exposed at once. Okta says its own systems were not breached, so how the group got in is still an open question. That is the part to watch, because the same weak point exists in thousands of companies. This is also not just a technical story, because the leaked records include personal contact details of real people.
For builders
Treat your identity layer as the crime scene you need to inspect first. Audit who can sign in, from where, and what one login unlocks. Log it, limit it, and assume stolen credentials will be tried against your systems.
Not financial advice. Do your own investigation.
This story was summarised with AI from Engadget's reporting and checked against our editorial policy. Danny's take reflects his views. Disclaimer.
