Breaches and incidentsBriefReported by a reputable outlet, citing the company
US Department of Homeland Security: directory data on 41,000+ employees and contractors published
DDoSecrets published data on more than 41,000 DHS employees and contractors (names, emails, phone numbers, job titles and group memberships across ICE...
- Disclosed
What happened
- DDoSecrets published data on more than 41,000 DHS employees and contractors (names, emails, phone numbers, job titles and group memberships across ICE, CBP, HSI, CISA and others), including people in covert and surveillance roles. CyberScoop confirmed current CISA employees appear in the data.
- Root cause: the “Department of Peace” hacktivist group claims the data came from the Okta single sign-on service used by DHS. Okta said “Okta is secure, and we have no evidence our data or systems were compromised.” Not confirmed by DHS.
- Attacker: Department of Peace (self-claimed), published via DDoSecrets.
- Response: DHS had not publicly commented at the time of reporting; the searchable site was offline by 29 Oct.
Sources
- https://cyberscoop.com/dhs-employee-data-leak-ddosecrets/
- https://gvwire.com/2026/10/28/leak-website-releases-data-on-tens-of-thousands-of-dhs-employees/
This is a brief: a short, sourced summary from our incident tracking. Full advisories add commands to check whether you are affected.