Skip to main content

Already a subscriber? Make sure to log into your account before viewing this content. You can access your account by hitting the “login” button on the top right corner. Still unable to see the content after signing in? Make sure your card on file is up-to-date.

The Department of Homeland Security is scrambling to get the names, roles and work contact details of more than 40,000 of its employees pulled offline, including thousands of immigration and border agents, after a hacker group leaked the data this week.

Getting into it: The data was posted Wednesday by Distributed Denial of Secrets, a nonprofit that publishes leaked government files, after a hacker group that goes by the Department of Peace claimed it took the records from the login system DHS employees use to access the department’s network. The records include employees’ work emails, cell numbers and office locations, but not home addresses. Timestamps suggest they were collected in mid-August. More than 21,000 belong to Customs and Border Protection staff, thousands more to Immigration and Customs Enforcement and its investigations unit, and nearly 1,000 to the cybersecurity agency CISA.

The leak also shows which surveillance and tech tools employees can access, including a phone location tracking service and a facial recognition app that ICE and CBP agents use, along with the names of dozens of operations that hadn’t been public before. Okta, the company behind the login system, said there’s no evidence its own systems were compromised. DHS said it’s aware of a “potential breach” and is working to address it.

88301808007 20260118 t 200408 z 1125464866 rc 2 w 3 ja 14 szz rtrmadp 3 usatrumpminnesota

DHS, through a security contractor, asked Icelandic web host FlokiNET on Thursday to take down a searchable version of the database, saying it put more than 40,000 people at risk of “harassment, stalking, and physical harm.” FlokiNET refused, but the site’s domain registrar shut it down anyway, and the data quickly reappeared on a different domain. Bluesky has also started blocking links to the dataset.

Another view: Transparency advocates say the work emails and phone numbers will help people file public records requests and investigate alleged abuses, at a time when ICE agents often wear masks and the administration regularly declines to name the officers behind operations where agents have opened fire on more than two dozen people.

This all comes as hackers keep hitting the federal government, with the leak following a breach of FBI agents’ personal information last month and a suspected hacking attempt that knocked the Federal Election Commission offline this week.

JOIN THE MOVEMENT

Keep up to date with our latest videos, news and content