A hacker group has published a searchable database identifying more than 41,000 Department of Homeland Security employees and contractors, including undercover investigators and immigration enforcement personnel, prompting security concerns as federal officials investigate the breach.
By yourNEWS Media Newsroom
WASHINGTON — A hacker group released sensitive personnel records identifying more than 41,000 Department of Homeland Security employees and contractors Wednesday, exposing contact information, job assignments and details about federal law enforcement personnel, including agents involved in undercover investigations.
The group, operating under the name Department of Peace, claimed responsibility for obtaining the information through a system used by DHS employees to access internal government applications.
According to an Oct. 28 investigation by The Washington Post, the group transferred the records to the nonprofit Distributed Denial of Secrets and Swiss hacker maia arson crimew, who organized the information into a publicly accessible, searchable database.
The database, called “Icepick,” contains names, government email addresses, telephone numbers, office locations, job titles and information about personnel assignments across several DHS agencies.
The Washington Post reported reviewing the records and verifying their authenticity with current and former Homeland Security officials.
The exposure includes employees and contractors associated with Immigration and Customs Enforcement, Customs and Border Protection, Homeland Security Investigations, U.S. Citizenship and Immigration Services and the Cybersecurity and Infrastructure Security Agency.
The Guardian reported that more than 21,000 records were associated with Customs and Border Protection, while approximately 6,600 involved Immigration and Customs Enforcement personnel.
The information also included references to employees engaged in surveillance, intelligence operations, computer forensics and undercover investigations.
Homeland Security officials acknowledged the situation Wednesday evening, confirming that the department was investigating a possible security breach.
“We take all security threats against our employees and officers seriously and will work to ensure all are properly protected,” DHS said in a statement.
The department also said it was “aware of a potential breach” and was “working to address the situation swiftly and effectively.”
Officials did not immediately disclose how the information was obtained, when the suspected intrusion occurred or whether investigators had identified those responsible.
The hackers claimed they accessed the information through the department’s single sign-on system, which allows authorized personnel to sign in to multiple internal applications using a centralized authentication service.
According to Reuters, the group identified the Okta identity-management platform as the source of the records.
However, Reuters was unable to independently verify the hackers’ account of how they obtained the information.
Okta said it had found no evidence that its own systems or data had been compromised.
The distinction leaves unresolved whether the records were obtained through a compromised government account, an application connected to the authentication service or another method of unauthorized access.
The exposed information reportedly includes internal group memberships and assignments that could reveal details about the department’s organizational structure and investigative activities.
Some records identify personnel associated with specialized surveillance operations, immigration enforcement, digital investigations and other sensitive federal activities.
The publication of those details raises concerns beyond the disclosure of ordinary employment information.
Security specialists warn that identifying undercover investigators can compromise ongoing operations, reveal investigative relationships and expose officers or their families to threats.
John Sandweg, who served as acting ICE director during the Obama administration, described the disclosure as a “nightmare scenario.”
Sandweg told The Washington Post that identifying federal agents involved in criminal investigations could endanger their safety and interfere with efforts targeting gangs, drug trafficking organizations and other criminal networks.
“I feel terrible for the agents and their families,” Sandweg said. “The array of threats they face as a result of this is stunning.”
Current and former DHS officials described the exposure as potentially unprecedented in the department’s history.
The Washington Post reported that Homeland Security Investigations circulated an internal alert warning personnel about the incident.
However, several ICE officers and Customs and Border Protection agents contacted by the newspaper said they had not yet received notification that their information might have been compromised.
The group responsible for the disclosure characterized its activities as an effort to promote transparency and accountability within federal immigration enforcement.
Emma Best, co-founder of Distributed Denial of Secrets, said the information provides insight into the department’s internal operations and personnel responsible for carrying out government policies.
“Rather than an indiscriminate directory of every DHS employee, Icepick identifies many of the architects and drivers of DHS policy and operations,” Best said.
Best also said the records identify individuals involved in undercover operations, internal investigations and immigration enforcement programs.
The publishers argued that journalists, researchers and oversight organizations could use the information to examine government activities.
They acknowledged, however, that the database does not contain a complete list of DHS personnel and may include inaccuracies.
The disclosure comes amid continuing disputes over the anonymity of federal immigration officers.
DHS has defended the practice of allowing certain agents to conceal their identities while conducting operations, citing threats, harassment and attacks directed at officers and their families.
Critics of the practice argue that concealing identifying information can complicate efforts to investigate alleged misconduct and hold individual officers accountable.
The hackers cited those controversies in statements accompanying the release.
However, publishing names and contact details obtained without authorization creates separate concerns involving employee safety, cybersecurity and the protection of sensitive investigative information.
The technology publication WIRED reported that the records also revealed information about internal access groups associated with surveillance systems and other government technology.
Such information could help outsiders understand relationships among agencies, personnel and investigative capabilities.
Cybersecurity specialists have warned that leaked employee directories can also be used to conduct targeted phishing, impersonation and other efforts to compromise government systems.
The incident follows another reported breach involving federal law enforcement personnel.
Earlier in October, a separate hacking group claimed to have stolen thousands of records associated with FBI employees and applicants, prompting concern about additional exposure of government personnel information.
The DHS disclosure is substantially larger, involving tens of thousands of records spanning multiple agencies responsible for immigration enforcement, border security and federal investigations.
Reuters reported independently confirming some of the information through publicly available records and direct contact with three DHS employees, although the news agency could not authenticate the entire collection.
The full accuracy and completeness of the published database therefore remain uncertain.
Federal officials have not announced arrests or criminal charges related to the reported intrusion.
Authorities also have not established whether the hackers obtained additional sensitive government information beyond the personnel records disclosed Wednesday.
The investigation is expected to examine the source of the records, the extent of unauthorized access and whether existing cybersecurity controls were compromised.
For DHS employees whose information was exposed, the immediate concerns include potential harassment, identity impersonation and risks to ongoing investigations.
The incident also raises broader questions about protecting personnel information within federal agencies that depend on centralized authentication systems and interconnected databases.
As of Thursday, Oct. 29, Homeland Security had acknowledged the potential breach and said it was taking steps to address the situation and protect affected personnel, while the precise method of access and full extent of the disclosure remained under investigation.
Original article
Comments