Hackers Release Contact Details for 40,000 Homeland Security Staff

A hacktivist collective known as the Department of Peace published personal contact information for more than 40,000 U.S. Department of Homeland Security employees on Wednesday. The leaked records include names, phone numbers, and addresses for agents and operatives, some of whom work in undercover capacities. The group stated that the breach targeted the department's single sign on system to access these personnel files.

In an online statement, a spokesperson for the Department of Peace connected the leak to recent comments by Secretary Markwayne Mullin. The group noted that Mullin said on July 17 that he was turning up the heat, arguing that the exposure was a direct consequence of that posture. The hackers distributed the stolen material to the group Distributed Denial of Secrets, which posted the data in a public database called Icepick.

The breach also involved U.S. based journalist Ryan Ottignon and Swiss hacker maia arson crimew. Ottignon told NPR that the two collaborated to create a searchable version of the data, with crimew handling the technical work. The dataset includes more than 21,000 records for U.S. Customs and Border Protection employees and another 10,000 for Immigration and Customs Enforcement and its Homeland Security Investigations unit.

Emma Best, a cofounder of Distributed Denial of Secrets, described the leak as extraordinary but deceptive in its simplicity. She explained that the data makes explicit connections between officials overseeing covert operations and key personnel in rendition and deportation programs. Other activists suggested the information will improve the effectiveness of freedom of information requests, which often fail due to a lack of specific identifying details.

DHS confirmed in a statement that it is aware of a potential breach and is actively working to address the situation. The department said it is taking necessary steps to ensure all employees are properly protected. The leaked records represent about a fifth of the department's total workforce, which numbers slightly more than 220,000 people.

Ottignon rejected claims that the project was a form of doxing. He argued that public officials frequently hide their identities while working in plain clothes and masks. He said the group needs oversight to ensure government functions properly, describing the leak as one step in that process. A note attached to the files by Distributed Denial of Secrets stated that it is fair for the public to have the officials' information since the officials have the public's.

The incident follows similar hacking attacks at the Federal Bureau of Investigation. The Department of Peace group framed the action as a response to the escalating nature of DHS operations. The released database allows for direct cross referencing of staff members across different units within the department.