A hacker known as "Department of Peace" stole personal records of over 41,000 Department of Homeland Security employees, including ICE and CBP staff, by exploiting Okta, and leaked the "Icepick" dataset via DDoSecrets.
<figure>
<img alt="" data-caption="" data-portal-copyright="Image: Rebecca Noble/Bloomberg via Getty Images" data-has-syndication-rights="1" src="https://platform.theverge.com/wp-content/uploads/sites/2/2026/10/gettyimages-2200388904.jpg?quality=90&strip=all&crop=0,0,100,100" />
<figcaption>
</figcaption>
</figure>
<p class="wp-block-paragraph">A hacker stole a trove of personal information from the Department of Homeland Security (DHS). The breach exposes the names, job titles, phone numbers, email addresses, and office locations of more than 41,000 employees, including those in US Immigration and Customs Enforcement (ICE) and Customs and Border Protection (CBP), according to <a href="https://techcrunch.com/2026/10/28/hacker-stole-personnel-data-about-thousands-of-homeland-security-employees-including-cbp-and-ice-agents/"><em>TechCrunch</em></a> and <a href="https://www.wired.com/story/massive-leak-exposes-41000-homeland-security-workers-including-undercover-ice-agents/"><em>Wired</em></a>. The data also linked the agencies to specific surveillance tools.</p>
<p class="wp-block-paragraph">As reported by <em>TechCrunch</em>, a hacker known as "Department of Peace" gained access to the data through Okta, an identity and access management service used by the DHS. Around 21,000 records pertain to CBP employees, and ne …</p>
<p><a href="https://www.theverge.com/tech/1021528/ice-cbp-data-leak">Read the full story at The Verge.</a></p>
# A hacker stole more than 40,000 DHS employee records
Source: [https://www.theverge.com/tech/1021528/ice-cbp-data-leak](https://www.theverge.com/tech/1021528/ice-cbp-data-leak)
[](https://www.theverge.com/authors/emma-roth)
Emma Roth
is a news writer who covers the streaming wars, consumer tech, crypto, social media, and much more\. Previously, she was a writer and editor at MUO\.
A hacker stole a trove of personal information from the Department of Homeland Security \(DHS\)\. The breach exposes the names, job titles, phone numbers, email addresses, and office locations of more than 41,000 employees, including those in US Immigration and Customs Enforcement \(ICE\) and Customs and Border Protection \(CBP\), according to[*TechCrunch*](https://techcrunch.com/2026/10/28/hacker-stole-personnel-data-about-thousands-of-homeland-security-employees-including-cbp-and-ice-agents/)and[*Wired*](https://www.wired.com/story/massive-leak-exposes-41000-homeland-security-workers-including-undercover-ice-agents/)\. The data also linked the agencies to specific surveillance tools\.
As reported by*TechCrunch*, a hacker known as “Department of Peace” gained access to the data through Okta, an identity and access management service used by the DHS\. Around 21,000 records pertain to CBP employees, and nearly 7,000 belong to staff at ICE\. The data also includes records from the Cybersecurity and Infrastructure Security Agency \(CISA\), US Citizenship and Immigration Services \(USCIS\), and Homeland Security Investigations \(HSI\)\.
The DHS has worked to[conceal the identities of CBP and ICE agents](https://www.theguardian.com/us-news/2025/jun/25/immigration-officers-wearing-masks), who have carried out[anti\-immigration raids](https://www.theverge.com/policy/877106/minneapolis-ice-cbp-occupation-immigration-raid-mutual-aid)around the US, while also[tracking down online critics](https://www.theverge.com/report/963106/ice-doxxing-office-of-professional-responsibility-free-speech)\. “They have our information, so it’s only fair that we have theirs,” the “Department of Peace” hacker said, according to*TechCrunch*\. This leak comes just weeks[after hackers stole data](https://www.theverge.com/policy/998966/shinyhunters-fbi-hack)from the FBI on its employees and job applicants\.
The leaked DHS information was reportedly given to cybersecurity researcher maia arson crimew, who shared it with Distributed Denial of Secrets \(DDoSecrets\), a nonprofit organization that’s now hosting the leaked “Icepick” dataset\. The leak also reportedly includes information about DHS groups that have access to tools that can be used for surveillance, such as the[facial recognition app Mobile Fortify](https://www.404media.co/ice-is-using-a-new-facial-recognition-app-to-identify-people-leaked-emails-show/)and PenLink, which can collect and analyze data from phones and online services\.
The DHS didn’t immediately respond to*The Verge*’s request for comment\.
**Follow topics and authors**from this story to see more like this in your personalized homepage feed and to receive email updates\.
- Emma Roth
Hacktivist group the Department of Peace breached U.S. Department of Homeland Security personnel files, exposing names, phone numbers, and addresses of over 40,000 DHS, CBP, and ICE employees, with the data released via Distributed Denial of Secrets as a searchable database.
A massive leak exposed details of over 41,000 DHS employees and contractors, including undercover ICE and CBP agents, phone numbers, and facility locations. The data, apparently sourced from DHS's Okta login system, was published by Distributed Denial of Secrets via a searchable site built by researcher maia arson crimew.
A leak website has published data pertaining to employees of the U.S. Department of Homeland Security, raising concerns about data security and the exposure of government personnel information.
Hacks of the Pentagon's Defense Manpower Data Center and the FBI within a month exposed sensitive personnel records of millions, including Social Security numbers and intelligence-related job titles that could be exploited by criminal groups or foreign adversaries.
WIRED reports on internal records revealing hundreds of allegations that CBP and DHS employees abused sensitive government databases to spy on romantic interests, family members, and coworkers, and even shared data with suspected criminals. The cases highlight systemic surveillance abuse and growing privacy risks as agencies adopt more AI and data-collection tools.