DHS Data Leak Exposes 41,000 Employees Including Undercover ICE Agents, Fueling Privacy and Operational Security Concerns

A major data breach has exposed personal and professional details of more than 41,000 Department of Homeland Security employees and contractors, including thousands tied to undercover operations at Immigration and Customs Enforcement (ICE) and Customs and Border Protection (CBP). The records, published October 28, 2026, by transparency nonprofit Distributed Denial of Secrets (DDoSecrets) under the name “Icepick,” include names, email addresses, phone numbers, office locations, job titles, and internal group memberships revealing access to surveillance tools, wiretap programs, Palantir software, and certified undercover operations.

Hacktivist group “Department of Peace” claimed responsibility, stating it obtained the data from DHS’s Okta single sign-on system and shared it with DDoSecrets and researcher maia arson crimew, who built a searchable database. The group framed the release as retaliation against stepped-up immigration enforcement, referencing DHS Secretary Markwayne Mullin’s July 2026 comments about “turning up the heat.”

Credible reporting from WIRED, The Washington Post, NPR, The Guardian, and others confirms the dataset’s scale: approximately 21,000 CBP records, 6,600–10,000 ICE entries (with a third linked to Homeland Security Investigations), and smaller numbers from USCIS, CISA, and headquarters. The Washington Post verified contents with current and former DHS officials. The leak identifies personnel in covert ops, leaker investigations, and deportation programs, providing an unprecedented organizational map of DHS components.

DHS acknowledged awareness of a potential breach and stated it is working to protect employees. Okta disputed any compromise of its systems. The searchable tool faced takedown attempts, including from a DHS contractor, and briefly went offline before resurfacing.

This incident builds on recent government data disclosures, including an FBI employee leak weeks prior, highlighting systemic vulnerabilities in federal identity management. It intensifies debates over balancing agent safety and operational secrecy against public accountability for immigration enforcement, while underscoring risks to personal data privacy when internal directories are exposed. The exposure of undercover affiliations raises direct concerns about compromised operations and potential targeting of personnel or their families.