Massive Data Breach Exposes Personal Information of 40,000 DHS Employees
A hacker operating under the alias "Department of Peace" has leaked personal information belonging to more than 40,000 employees of the U.S. Department of Homeland Security (DHS), including agents from Immigration and Customs Enforcement (ICE) and cybersecurity staff. This alarming breach exposes these individuals to potential harassment and violence, highlighting vulnerabilities within the department's data security protocols.
According to a report by TechCrunch, the breach occurred earlier this year but was not disclosed until now. The leaked data includes names, job titles, work emails, cell phone numbers, and office locations for DHS employees. TechCrunch verified part of the dataset by cross-referencing names of known DHS employees with an offline copy of the database.
Common Sense Shop
The United States of Common Sense
Amazon shopping links. Sponsor Complete!
The hacker claims to have extracted the data from an Okta single sign-on system used by DHS employees and contractors to access the department's central network. This system reportedly contains IT and login records, indicating which internal applications and systems each employee can access. Timestamps in the data suggest the breach occurred around mid-August.
Among the leaked records, approximately 21,000 belong to Customs and Border Protection (CBP) employees stationed at airports and ports of entry. Around 10,000 records pertain to ICE and its Homeland Security Investigations unit. Additionally, just under 1,000 records involve staff from the Cybersecurity and Infrastructure Security Agency, along with thousands more from DHS headquarters and other component agencies, including U.S. Citizenship and Immigration Services and the Federal Protective Service. In total, this leak covers about one-fifth of DHS's workforce, which numbers roughly 220,000.
In a note accompanying the leaked data, the hacker stated, "They have our information, so it’s only fair that we have theirs." This sentiment reflects a growing trend of cyberattacks targeting government agencies, raising concerns about the safety of public servants and the integrity of sensitive information.
Recent Trends in DHS Data Breaches
This incident marks the second breach involving DHS this year. An earlier breach involved the theft of thousands of contracts between the department and private companies, including defense contractors and surveillance vendors. It follows a series of other recent breaches across the federal government, including the exposure of personal records belonging to thousands of FBI agents and millions of current and former military personnel from the Pentagon's human resources unit.
In response to the data leak, a DHS spokesperson acknowledged the breach and stated, "DHS is aware of a potential breach and is actively working to address the situation swiftly and effectively. We take all security threats against our employees and officers seriously and will work to ensure all are properly protected. We will update the public when more information is available."
The Common Sense Test
An Okta spokesperson, however, disputed claims that its systems were compromised, asserting, "Okta is secure, and we have no evidence our data or systems were compromised." The hacker did not respond to requests for comment regarding the specifics of how the breach occurred.
This incident underscores the critical need for robust cybersecurity measures within government agencies, particularly those handling sensitive information related to national security and law enforcement. As threats to public servants escalate, the federal government must prioritize the protection of its employees and the integrity of its data systems.
