Hacktivists have published a massive data set of records “obtained” from the United States Department of Homeland Security, sharing it both on a searchable website and with Distributed Denial of Secrets, a leak site dedicated to sharing data it believes is in the public interest.
The dataset features employee data and operational information from several Homeland Security agencies, including Customs and Border Protection, Federal Law Enforcement Training Centers, the Federal Protective Service, and Immigration and Customs Enforcement.
Some data from the Cybersecurity & Infrastructure Security Agency is included; however, that data, according to the hacktivists – who call themselves the Department of Peace – “is excluded from searches per default to prioritise the law enforcement and intelligence arms of the DHS”.
The data covers employee records, Cellebrite groups, covert and undercover groups, as well as operation names. In total, 41,191 individuals are impacted, alongside more than 55,000 groups, and more than 6,900 offices.
The data apparently comes from an OKTA single sign-on service used by the DHS, which was then shared with DDoSecrets and Swiss hacktivist maia arson crimew, who was responsible for publishing a US government No Fly List in 2023. crimew created the searchable version with the assistance of journalist Ryan Fae.
"On July 17th, Markwayne Mullin said he was 'turning up the heat.' This is what happens to ICE when you do that," a Department of Peace said, as reported by DDoSecrets.
Mullin is the Secretary of Homeland Security.
crimew said the data is “massive in terms of both size and impact”.
“It provides an unprecedented look into the Department of Homeland Security's organisational structure, highlighting which people do what work across multiple DHS agencies, including ICE," she said.
"It is a complete game changer for anyone investigating DHS, simplifying the identification of agents and their lines of command. It provides FOIA material for years to come!"
Journalist and DDoSecrets cofounder Emma Best said the dataset – known as Icepick – “identifies many of the architects and drivers of DHS policy and operations”.
"The leak is extraordinary but deceptive in its simplicity as it identifies the officials responsible for overseeing covert and undercover operations, the government's hunt for leakers and the failed BlueLeaks investigation – along with key personnel in DHS's ever-escalating rendition and deportation programs.
"By replacing the regime's anonymity with accountability, Icepick and the tool developed by maia are catalysts for investigations, empowering journalists, Congressional inquiries, legal challenges, community action and Freedom of Information Act requests."
The DHS has said it is “aware of a potential breach and is actively working to address the situation swiftly and effectively”.
Want to see more stories from trusted news sources?Make Cyber Daily a preferred news source on Google.
