Data Leakers Release Personal Files for 40,000 Homeland Security Workers

A nonprofit data transparency group released personal information for more than 40,000 Department of Homeland Security employees on Wednesday. The dataset includes contact details and job assignments for staff in sensitive areas such as surveillance and human intelligence.

The disclosure places the DHS under immediate pressure to contain the fallout. The agency confirmed it is aware of a potential breach and is actively working to address the situation. Officials stated they are ensuring employees are properly protected and will update the public when more information becomes available.

The data includes names, phone numbers, and email addresses for personnel from several component agencies. These include Immigration and Customs Enforcement, Customs and Border Protection, Homeland Security Investigations, and the Cybersecurity and Infrastructure Security Agency. The records also list job titles and email groups.

Specific details reveal which agents are assigned to special operations, computer forensics, and undercover work. The leak exposes internal organization charts and previously undisclosed programs. This information was not previously available to the public or through standard records requests.

The nonprofit Distributed Denial of Secrets said the data was obtained by an entity calling itself the Department of Peace. In a statement included with the release, the Department of Peace said DHS employees have their information, making it fair for the public to have the agency staff's details. The group stated it hopes the data can be used to limit further harm by the DHS.

Emma Best, co-founder of Distributed Denial of Secrets, said the group is providing a search tool to allow the public to browse the files. Best argued the tool will replace anonymity with accountability and boost congressional oversight. The journalist known as maia arson crimew, who developed the tool, said it will provide FOIA material for years to come.

The Department of Peace claimed in March that it hacked DHS and posted documents related to outside vendor contracts. Best stated the group harvested the employee data from the Okta sign-on service used by the agency. Reuters could not immediately corroborate this specific claim.

Okta, the identity management company, responded to a query by stating its systems are secure and it has no evidence its data was compromised. The Department of Peace did not immediately respond to a request for comment regarding the new release.

Reuters verified the authenticity of portions of the data by matching personal information for six named DHS employees against credit bureau records and dark web intelligence. The news agency called three of those employees directly and confirmed their phone numbers and other details. One employee said it was the first they had heard of a breach.

This is the third major government data leak in the past month. In September, the hacking group ShinyHunters claimed theft of sensitive data from the Federal Bureau of Investigation. Last week, a class action lawsuit was filed against the Defense Department following a breach that exposed data on millions of current and former military personnel.