Personal details for more than 41,000 Department of Homeland Security employees and contractors — including thousands of immigration enforcement agents — have been leaked online in what researchers describe as an unprecedented breach of the agency's own staff.
The leak, dubbed "Icepick," includes names, work addresses, phone numbers and job descriptions for personnel across DHS, including agents with Immigration and Customs Enforcement and Customs and Border Protection. A hacktivist group calling itself Department of Peace said it obtained the data through Okta, the single sign-on service DHS uses to manage internal logins. Okta said in a statement that it is "secure" and that the company has "no evidence our data or systems were compromised."
More than 21,000 CBP records
Of the personnel named, more than 21,000 work for Customs and Border Protection and nearly 6,600 for ICE, according to the leaked dataset, which was published by the hacker known as maia crimew alongside the transparency site Distributed Denial of Secrets. Reuters was able to match personal information for six named employees against outside records, lending credibility to the trove. Records also cover staff at Homeland Security Investigations, the Federal Protective Service and the Cybersecurity and Infrastructure Security Agency, along with previously unknown operation names and details of contractor technology used in the field, including tools from Cellebrite and Palantir.
A DHS spokesperson said the agency is "aware of a potential breach and is actively working to address the situation swiftly and effectively," adding that it takes "all security threats against our employees and officers seriously."
DDoSecrets co-founder Emma Best said the intent was not to compile a directory of every agent but to replace "anonymity with accountability," pointing to agents' roles overseeing covert operations, leak investigations and the government's deportation programs. A spokesperson for Department of Peace tied the leak directly to recent fatal shootings by ICE agents, including the deaths of Alex Pretti and Renee Good in Minnesota this year.
The breach is the third in recent weeks to hit a federal agency: the FBI was hacked last month by a group called ShinyHunters, and the Federal Election Commission was briefly taken offline amid a suspected hacking attempt. It also lands amid rising public scrutiny of ICE tactics, after agents who frequently work with their faces covered and without visible identification have been involved in a string of shootings during an administration-wide surge in arrests and deportations.
Since President Trump returned to office in 2025, the US has carried out nearly 1 million deportations, according to Migration Policy Institute data, with more than 70% involving people with no criminal record. DHS has not said when it expects to complete its review of the breach.
