Hackers Expose Data of 41,000 US Homeland Security Agents in Major Breach

Key points

• Over 41,000 DHS personnel records were leaked, including 21,000 Customs and Border Protection agents and 6,600 Immigration and Customs Enforcement officers.
• The leak includes names, work addresses, phone numbers, and descriptions of duties, as well as details of covert operations and technologies used by agencies like Palantir and Cellbrite.
• The breach was executed by a group called the Department of Peace, which accessed data via the Okta single sign-on service, and published by Distributed Denial of Secrets.
• DHS confirmed it is aware of the potential breach and is working to address it, while Okta stated its systems were not compromised.
• The leak follows recent hacks of the FBI and Federal Election Commission, occurring amid rising public backlash against violent immigration enforcement actions.

Background

This incident follows a pattern of recent security breaches targeting US government agencies, including the FBI and Federal Election Commission. It also aligns with broader concerns regarding the security of digital infrastructure and AI systems, as seen in recent incidents involving Meta and OpenAI. The leak occurs during a period of increased immigration enforcement under the Trump administration, which has enacted nearly 1 million deportations since 2025, with over 70% of those individuals having no criminal record. Public tensions have risen due to violent incidents involving ICE agents, including the deaths of Alex Pretti and Renee Good in Minnesota.

Why it matters

The breach undermines the anonymity of immigration agents, who often operate without identification, and could impact public safety and accountability. It highlights vulnerabilities in government security systems and may influence public perception of immigration enforcement policies. The exposure of operational details could affect ongoing and future enforcement actions, potentially altering the dynamics of immigration control in the US.

What to watch

DHS is expected to update the public with more information on the breach and its impact. Okta may conduct a further review of its security measures. The leak could lead to increased scrutiny of DHS operations and potential changes in how immigration enforcement is conducted. Public and political reactions to the breach may influence future policy decisions regarding immigration and data security.