Massive leak exposes 41,000 DHS workers and undercover ICE agents

What happened

Someone leaked a large set of DHS records. They include work email addresses, phone numbers, and office addresses for people at DHS and seven of its smaller agencies, such as Immigration and Customs Enforcement. The files also mention internal computer systems and sensitive information about undercover and surveillance work. The nonprofit Distributed Denial of Secrets published the archive, which it calls "Icepick." The group says the leakers were calling themselves the Department of Peace.

Key numbers and facts

• More than 41,000 employees or contractors are included in the records.
• The records cover DHS itself and seven component agencies, including ICE and US Customs and Border Protection.
• The records were last updated on August 19, 2026.
• DDoSecrets says the data came from DHS's Okta login system.
• Okta says it knows of no breach of its own systems.

Some background

DHS is the part of the US government that handles homeland security, including border control and immigration. In recent years, DHS has gone after its critics. It has tried to find out who anonymous social media users are and has sought records about protesters. The department has also tried to hide the names and faces of its employees. It has widened the meaning of "doxing," which usually means publishing someone's home address for harmful reasons, so that it now can include sharing the names and job titles of public workers. This leak also follows a breach in which hackers called ShinyHunters claimed to have stolen data on nearly every FBI employee and their families. Police have arrested several suspects in that case.

Why it matters

The leak shows how DHS is organized and how it works, which could help outsiders understand the agency. It also puts workers at risk, especially those in undercover jobs. The hackers say the release is fair because DHS has their information. An Okta spokesperson says its systems are secure, so the exact way the data leaked is still unclear.

What to watch

• Whether DHS confirms how the data was taken and how serious the leak is.
• Whether Okta finds any problem in its systems or in how DHS uses its login service.
• Whether officials try to remove the archive or take legal action against those who shared it.
• Whether any undercover or surveillance staff are identified or put in danger.