On January 7, 2026, the U.S. Department of Homeland Security’s (DHS) personnel files were compromised by a hacking group. This breach exposed the personal information of more than 40,000 agents and associates involved in both regular and undercover operations.
The hackers, identified as the Department of Peace, claimed responsibility for the breach, which they announced online. They stated that they exploited the DHS’s single sign-on system to obtain the data. The stolen information was then shared with Distributed Denial of Secrets, which published the data in a database called Icepick. The data was also passed to Ryan Ottignon, a journalist, and a Swiss hacker known as maia arson crimew, who created a searchable database from the information.
Emma Best, cofounder of DDoSecrets, characterized the leak as “extraordinary but deceptive in its simplicity.” It links officials responsible for covert operations and key personnel involved in DHS’s rendition and deportation efforts.
Activists believe the release of this data will assist investigations into DHS activities and improve the filing of freedom of information requests. These requests often fail without specific details, such as names and email addresses.
The DHS has acknowledged the breach, noting they are taking steps to resolve the issue and protect their personnel.
Among the records leaked, over 21,000 pertain to U.S. Customs and Border Protection employees, with another 10,000 involving Immigration and Customs Enforcement and its Homeland Security Investigations unit. Although the breach is significant, the database covered only a fraction of DHS’s 220,000 workforce.
Ottignon, experienced in handling data leaks, dismissed claims by critics that he was doxing government employees. He emphasized the need for transparency and oversight for officials who operate covertly, often concealing their identities.
DDoSecrets attached a note to the released files, stating, “They have our information, so it’s only fair that we have theirs.”
Leave a Reply