Key facts
- Over 40,000 Department of Homeland Security employees' data was leaked online.
- The leaked data includes names, job titles, email addresses, and phone numbers.
- The breach reportedly originated from a compromised Okta single sign-on system.
- U.S. Customs and Border Protection employees constitute over half of the leaked records.
- The data was shared with DDoSecrets, a nonprofit collective hosting leaked datasets.
Personally identifiable information belonging to thousands of U.S. Department of Homeland Security employees has been published online after a hacker, known as Department of Peace, claimed to have stolen the data earlier this year. The breach includes names, job titles, and work contact information of over 40,000 employees across various agencies, including U.S. Customs and Border Protection (CBP), Immigration and Customs Enforcement (ICE), and the Cybersecurity and Infrastructure Security Agency (CISA).
The hacker stated the data was obtained from an Okta single sign-on system used by Homeland Security. The leaked information also reveals details about employees' access to systems like Microsoft 365, Adobe Acrobat, and surveillance tools such as Penlink and Mobile Fortify. The data was provided to journalist maia arson crimew and subsequently shared with DDoSecrets.