Hacktivists leak 41,000 DHS staff records, revealing undercover ICE agents
Hacktivists leak 41,000 DHS employee records, including undercover ICE agents.
A hacktivist group named Department of Peace has leaked over 41,000 U.S. Department of Homeland Security (DHS) employee records, including names, offices, and assignments of undercover ICE agents. The data, published by Distributed Denial of Secrets (DDoSecrets) and journalist maia arson crimew, was allegedly exfiltrated from an Okta single sign-on service, though Okta denies any compromise of its systems. The leak provides extensive details that could aid in identifying DHS personnel and operations, raising significant security concerns.
AI summary of the linked source. Not reviewed by an editor. How this works
Run Okta?
Get an email when a new story names Okta, usually within the hour.
Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch worksPrivacy
The lesson from this incident
Full lessonA hacktivist group allegedly exfiltrated over 41,000 DHS employee records—including sensitive details about undercover ICE agents—purportedly through a compromise related to Okta's single sign-on service. The exposure of covert personnel identities represents a severe operational security failure, as aggregating employee names, offices, and assignments can directly endanger lives and compromise ongoing law enforcement operations. This incident highlights the critical danger of centralizing sensitive personnel data behind a single identity provider without layered access controls and data segmentation. It also underscores that even if the SSO provider itself was not breached, misconfigured integrations or compromised downstream tenant accounts can be equally devastating.
What helps against this
How we list vendors- Identity threat detection and response (ITDR)
Attackers who log in with real, stolen credentials get noticed.
- Identity governance and single sign-on
People who leave or change roles lose access everywhere at once, and forgotten accounts stop piling up.
- Log management and security data pipelines
Security logs are so expensive to collect and keep that teams drop the ones they need when an incident happens.
Indicators of Compromise
Extracted by AI from the linked source. Not reviewed by an editor. How this works
- domain — icepi.cx