Hackers Breach DHS Personnel Files, Revealing Sensitive Data

The U.S. Department of Homeland Security (DHS) suffered a significant data breach when a hacking group accessed and exposed the personnel files of over 40,000 DHS agents, operatives, and associates. This breach, which came to light on Wednesday, included sensitive information such as names, phone numbers, and addresses of those involved in undercover operations.

A representative of the hacktivist group, known as the Department of Peace, stated online that the breach occurred as a response to U.S. Senator Markwayne Mullin’s recent comments about intensifying actions within DHS. The hackers claimed they exploited DHS’s single sign-on system to steal the data. This information was then shared with Distributed Denial of Secrets (DDoSecrets), which published the data in a database named Icepick.

The hackers also collaborated with Ryan Ottignon, a journalist based in the U.S., and a Swiss hacker known by the alias maia arson crimew. Together, they developed a searchable online database, with crimew handling the technical aspects, according to Ottignon.

“Extraordinary but deceptive in its simplicity,” stated Emma Best, co-founder of DDoSecrets. She emphasized the leak’s significance in revealing connections between officials overseeing covert operations and key personnel involved in DHS’s rendition and deportation programs.

Activists have stated that this information will prove valuable for those investigating DHS or filing freedom of information requests, which often yield inadequate results without specific information such as names and email addresses.

In response, DHS announced it was investigating the breach and taking steps to ensure the protection of its personnel. Over 21,000 of the records pertain to employees of U.S. Customs and Border Protection, while another 10,000 involve employees of Immigration and Customs Enforcement and Homeland Security Investigations. Though significant, the breach covers only about one-fifth of DHS’s workforce, which numbers over 220,000.

Ottignon, accustomed to working on similar data leak projects, defended against accusations of doxxing government employees. He argued that many public officials operate secretly within communities, often in plain clothes and disguises, conducting questionable activities, which merit public oversight.

“They have our information, so it’s only fair that we have theirs,” DDoSecrets noted in a message attached to the data files, underscoring the push for transparency and accountability in government operations.