Hacktivist 'Department of Peace' Claims Breach of 41,000 DHS Employee Records via Okta Flaw
A hacktivist group named 'Department of Peace' claims to have stolen personal data, including phone numbers and emails, from over 41,000 Department of Homeland Security employees. The group exploited a vulnerability in DHS's use of Okta's single sign-on service. While Politico could not independently verify the data, Reuters and TechCrunch confirmed parts of the leak against third-party records. This incident adds to a recent wave of cyberattacks targeting federal agencies.
Key points
- The hacktivist group 'Department of Peace' claims to have obtained data on more than 41,000 DHS employees, including phone numbers and email addresses.
- The group stated it exploited DHS's use of Okta's single sign-on service to access the information.
- Politico was unable to independently verify the authenticity of the leaked dataset.
- Reuters and TechCrunch matched information from the leak to third-party records and known names of DHS employees.
- The nonprofit Distributed Denial of Secrets published the leaked data on its website.
- This breach is part of a series of recent cyber incidents targeting federal agencies.
Background
This incident follows a pattern of federal data breaches in 2026. In September, the hacking group ShinyHunters claimed to have breached the FBI, exposing data on agents and applicants. In October, the FBI removed an Accenture contractor after a failure to apply a security patch allowed ShinyHunters to breach the bureau's job portal, exposing data of nearly all FBI employees and over 8,000 local law enforcement officials. Additionally, in late October, Meta suspended a sharing feature for its Muse AI assistant after researchers found that over 6,800 private conversation links were publicly accessible, exposing sensitive user data.
Why it matters
The breach highlights ongoing vulnerabilities in federal agency security, particularly regarding third-party services like Okta. It raises concerns about the protection of employee personal data and the potential for targeted attacks on government infrastructure. The inability of some outlets to independently verify the data underscores the challenges in confirming the scope and authenticity of such breaches.
What to watch
DHS and Okta are expected to investigate the breach and implement security measures to prevent further exploitation. The hacktivist group 'Department of Peace' may release more data or make further demands. Independent verification of the leaked data by other outlets or government agencies will be crucial in assessing the true impact of the breach.
Want the full story? Read the original reporting
Read on Politico