Personal and professional information belonging to more than 41,000 employees of the U.S. Department of Homeland Security (DHS), including thousands of immigration enforcement officers, has been published online following a major cybersecurity incident. The exposed records reportedly include employees of Immigration and Customs Enforcement (ICE), Customs and Border Protection (CBP) and several other federal agencies responsible for national security, immigration enforcement and infrastructure protection.
The information includes names, workplace addresses, telephone numbers and descriptions of employees’ professional responsibilities. The disclosure has raised concerns about the potential risks to federal personnel, particularly officers involved in immigration operations and investigations that are not always made public.
The DHS has acknowledged that it is aware of a possible security breach and is working to address the situation. However, questions remain about how the information was obtained, whether additional systems were affected and what measures will be introduced to protect employees whose details have been exposed.
The incident comes amid heightened tensions surrounding U.S. immigration enforcement, growing scrutiny of federal agencies and a series of cybersecurity incidents involving American government institutions.
Thousands of Federal Employees Identified in the Data Leak
The database, named “Icepick,” was published online on Wednesday and reportedly contains records associated with more than 41,000 DHS employees. The information covers personnel across multiple agencies, including immigration officers, investigators and employees working in other areas of federal security.
According to the reported figures, more than 21,000 individuals in the database work for Customs and Border Protection, while approximately 6,600 are affiliated with Immigration and Customs Enforcement.
The records also include employees of Homeland Security Investigations, the Federal Protective Service and the Cybersecurity and Infrastructure Security Agency.
These organizations perform different functions within the federal security system. CBP is responsible for border security and inspections at ports of entry, while ICE investigates immigration-related violations and carries out enforcement and removal operations. Homeland Security Investigations handles a broader range of criminal investigations, including human trafficking, financial crimes and transnational criminal activity.
What Information Was Exposed?
Among the details included are names, workplace contact information, telephone numbers and descriptions of job responsibilities.
The database also reportedly contains information about previously undisclosed operations, including the names of certain operations and details about the agents who supervised or participated in them.
In addition, the material references some of the technologies used by federal personnel, including tools provided by Cellebrite and Palantir, companies whose products are used in areas such as digital investigations, data analysis and intelligence-related work.
The extent to which the exposed information could affect ongoing investigations or individual employees remains unclear. Nevertheless, the combination of personnel records, operational references and information about investigative technology could create additional security concerns if the material were used to target specific officers or compromise sensitive activities.
Who Published the Database?
The information was released by a group calling itself Department of Peace. Cybersecurity researcher and journalist maia crimew and the transparency platform Distributed Denial of Secrets, commonly known as DDoSecrets, were also involved in facilitating the publication.
Representatives associated with the release said the objective was not necessarily to create a comprehensive directory of every DHS employee. Instead, they described the disclosure as an effort to increase transparency and accountability surrounding federal immigration enforcement and other government activities.
Emma Best, co-founder of DDoSecrets, said the material highlights officials responsible for overseeing covert operations, investigations involving the disclosure of confidential information and deportation programs.
Department of Peace Links Release to Immigration Enforcement
A spokesperson for Department of Peace connected the publication to the activities of ICE and referred to comments made by Homeland Security Secretary Markwayne Mullin on July 17.
According to the spokesperson, Mullin had said he was increasing pressure on the agency. Mullin assumed the position of DHS secretary in March.
The DHS, however, has emphasized the need to protect its personnel.
A department spokesperson said the agency was aware of a potential security breach and was working to address it.
“We take all threats against our employees and officials seriously and will ensure they are appropriately protected,” the spokesperson said, adding that further information would be provided when more details became available.
Okta Connection Raises Questions About Access Security
According to Department of Peace, the employee profiles were obtained through Okta, an identity and access management service used by organizations to control access to internal platforms and applications.
A spokesperson for Okta said the company was aware of the claims but that there was no evidence its systems or data had been compromised.
Information may be exposed through a variety of circumstances, including compromised accounts, weaknesses in an organization’s configuration, unauthorized access to connected applications or other security failures.
At this stage, the available information does not conclusively establish the precise technical method used to obtain the DHS employee records.
Determining how the information was accessed will be central to understanding whether the incident resulted from compromised credentials, a vulnerability in a connected system or another form of unauthorized access.
U.S. Government Agencies Face Additional Cybersecurity Pressure
The disclosure comes after other cybersecurity incidents involving American government institutions.
The previous month, the hacking group ShinyHunters reportedly targeted the FBI and obtained personal information belonging to thousands of agents.
In another recent incident, the Federal Election Commission experienced a disruption that was attributed to a suspected cyberattack attempt.
Federal agencies hold extensive amounts of personal data, operational records and information about employees whose work may involve investigations, intelligence gathering or national security.
A successful intrusion can therefore have consequences extending beyond the immediate loss of data. Depending on the information involved, exposed records may create opportunities for impersonation, harassment, targeted threats or attempts to obtain additional confidential information.
According to figures from the Migration Policy Institute cited in the reporting, the United States has carried out approximately one million deportations since Trump returned to the White House in 2025. The same source reported that more than 70% of the people deported had no criminal convictions.
