Personal details of more than 41,000 personnel working for the US Department of Homeland Security (DHS), including thousands of immigration enforcement agents, have been leaked to the public. The compromised data encompasses names, work addresses, phone numbers, and descriptions of duties for staff members across multiple agencies, marking the third major government security breach in recent weeks.
Details of the Leaked Database
The leaked information was published in an online database named Icepick. Data shows that more than 21,000 of the affected agents work for Customs and Border Protection (CBP), while nearly 6,600 are employed by Immigration and Customs Enforcement (ICE). Additional records cover personnel from Homeland Security Investigations, the Federal Protective Service, and the Cybersecurity and Infrastructure Security Agency.
Beyond personnel contact information, the leaked files revealed dozens of previously unknown operation names, the agents who led and participated in those operations, and technologies utilized by the agency, including tools from Cellebrite and Palantir. A group called the Department of Peace accessed the records, while journalist and cybersecurity researcher maia crimew alongside the website Distributed Denial of Secrets (DDoSecrets) published the information online.
Emma Best, co-founder of DDoSecrets, stated that the release aimed to replace anonymity with accountability rather than serving as a standard directory. Best noted that the leak exposes officials overseeing covert operations, government investigations into leakers, and deportation programs. The Department of Peace attributed the hack to ICE actions, citing statements made by Homeland Security Secretary Markwayne Mullin.
The Department of Peace reported gaining access to the DHS agent profiles via a single sign-on service called Okta. A spokeswoman for Okta responded that the company is aware of the claims but stated that Okta remains secure with no evidence of compromised data or systems. A DHS spokesperson stated that the agency is actively addressing the potential breach and will protect its employees.
Broader Context of Hacks and Immigration Enforcement
This incident follows recent cyberattacks targeting other US federal entities. Last month, the FBI suffered a hack by a group named ShinyHunters, which extracted personal data on thousands of agents. Additionally, the Federal Election Commission was recently taken offline due to a suspected hacking attempt.
The breach coincides with rising public scrutiny surrounding US immigration enforcement as the Trump administration drives an increase in arrests and deportations. Immigration operations have faced criticism and instances of violence this year, with ICE agents shooting over two dozen individuals and killing at least nine. These fatalities include the high-profile deaths of Alex Pretti and Renee Good in Minnesota, neither of whom were the intended targets of the operations.
Critics and US politicians have increasingly demanded that DHS enforce legal requirements for immigration agents to identify themselves during enforcement actions, noting that agents frequently operate with covered faces. Data from the Migration Policy Institute indicates that the US has carried out nearly 1 million deportations since President Donald Trump returned to office in 2025, with over 70 percent involving individuals with no criminal record.
The Department of Homeland Security stated it will update the public as more information regarding the security breach becomes available.
