A massive data breach has exposed the identities of more than 41,000 federal personnel online. According to The Washington Post, an activist group published a searchable database of Department of Homeland Security employees on Wednesday. The leaked records expose immigration officers, border agents, contractors, and undercover investigators across multiple federal agencies.
A hacktivist group calling itself the Department of Peace claimed responsibility for the unprecedented digital intrusion. They accessed secure DHS databases through an internal single sign-on service used by agency employees. The group then shared the files with the nonprofit Distributed Denial of Secrets and Swiss hacker maia arson crimew. Together, they built an online portal dubbed “Icepick.” As reported by The Washington Post, the nonprofit stated the database includes “employee names, offices, contact information, and assignments.”
The Washington Post viewed the database contents and verified its authenticity with current and former DHS officials. On Wednesday night, the agency confirmed to The Washington Post that it was “aware of a potential breach.” Officials added the department was “working to address the situation swiftly and effectively.”
“We take all security threats against our employees and officers seriously and will work to ensure all are properly protected,” the DHS statement noted.
The hackers claimed their goal is to increase public oversight amid President Donald Trump’s mass-deportation operations. Over the past 21 months, enforcement actions have sparked fierce protests, violent clashes, and threats against masked agents. The hacker group directly referenced Homeland Security Secretary Markwayne Mullin in a statement alongside the leaked files.
“On July 17th, Markwayne Mullin said he was ‘turning up the heat,‘” the hacker statement read. “This is what happens to ICE when you do that.“
Current and former officials told The Washington Post the exposure appears unprecedented in the agency’s history. Former acting ICE director John Sandweg described the breach to The Washington Post as a “nightmare scenario.” He warned that exposing undercover personnel puts them “in great jeopardy” and endangers cartel investigations.
“I feel terrible for the agents and their families,” Sandweg said. “The array of threats they face as a result of this is stunning.”
While an intelligence unit issued an internal alert, many frontline workers remained completely in the dark. Multiple agents in Tucson, Philadelphia, and East Texas told The Washington Post they had not been informed yet. Meanwhile, Distributed Denial of Secrets co-founder Emma Best defended the release in an online statement. Best said Icepick “identifies many of the architects and drivers of DHS policy and operations.”
Sources
- The Washington Post: https://www.washingtonpost.com/immigration/2026/10/28/ice-cbp-other-dhs-officer-identities-posted-online-data-breach/
- CyberSecurity News: https://cybersecuritynews.com/dhs-data-leak/
- Shattered.io: https://shattered.io/dhs-data-leak-40000-employees-icepick-ddosecrets-oct-28-2026/
Disclaimer
Artificial Intelligence Disclosure & Legal Disclaimer
AI Content Policy.
To provide our readers with timely and comprehensive coverage, South Florida Reporter uses artificial intelligence (AI) to assist in producing certain articles and visual content.
Articles: AI may be used to assist in research, structural drafting, or data analysis. All AI-assisted text is reviewed and edited by our team to ensure accuracy and adherence to our editorial standards.
Images: Any imagery generated or significantly altered by AI is clearly marked with a disclaimer or watermark to distinguish it from traditional photography or editorial illustrations.
General Disclaimer
The information contained in South Florida Reporter is for general information purposes only.
South Florida Reporter assumes no responsibility for errors or omissions in the contents of the Service. In no event shall South Florida Reporter be liable for any special, direct, indirect, consequential, or incidental damages or any damages whatsoever, whether in an action of contract, negligence or other tort, arising out of or in connection with the use of the Service or the contents of the Service.
The Company reserves the right to make additions, deletions, or modifications to the contents of the Service at any time without prior notice. The Company does not warrant that the Service is free of viruses or other harmful components.
