A recent leak has revealed two exclusive permission groups within the Department of Homeland Security (DHS): “Executive Leadership” and “AI Access.” These groups list individuals who have been granted exceptions to the department’s web filtering system that typically blocks certain websites for employees. Among the 13 individuals identified in both groups are notable figures such as former DHS Secretary Kristi Noem, and Antoine McCord, the former Chief Information Officer of DHS who has recently returned to the defense technology firm Anduril. Other names include Philip Hegseth, a senior adviser to the DHS Secretary and brother of Defense Secretary Pete Hegseth, along with Jayce Krachenfels, a policy adviser with prior experience on Donald Trump‘s 2024 presidential campaign. None of these individuals have commented on the findings.
The leaked information also references various AI tools, including OpenAI’s ChatGPT, Google’s Gemini, and Microsoft’s Copilot. One group, named “Grok.com,” includes a total of eight DHS technology officials, featuring the department’s previous CIO and chief data officer.
Alexander Leslie, a national security expert at the threat intelligence firm Recorded Future, commented on the implications of the leak, stating, “If authentic and current, this is an extraordinarily valuable intelligence resource for those seeking to penetrate DHS.” He emphasized that this dataset could be even more beneficial when cross-referenced with other compromised data and intelligence collections, potentially allowing adversaries to exploit personnel vulnerabilities or disrupt ongoing investigations.
In addition to the executive and AI groups, the leak shows that over 700 accounts are linked to a group related to Signal, the encrypted messaging application, primarily involving Customs and Border Protection (CBP) personnel. Furthermore, more than 200 accounts are associated with a group linked to Mobile Fortify, a face-recognition application utilized by immigration agents. This group encompasses field supervisors, tactical agents, and special response team members, with a significant number located in Texas, California, and Arizona.
Since July 4, 2025, approximately 1,300 enforcement accounts for Immigration and Customs Enforcement (ICE) have been established following the signing of the One Big Beautiful Bill Act by Trump, which allocated funding for the hiring of 10,000 new ICE Enforcement and Removal officers by the end of 2025.
The leak also indicates that nearly 20 accounts are tied to the Department of Defense, referred to by the administration as the Department of War. Eight are included in a group labeled “ICE Tip Line DOW Surge,” while about 170 accounts offer “military processing support” at ICE facilities, with 35 identifying as members of the National Guard.
Editor’s Take
This leakage of sensitive information concerning DHS personnel highlights significant vulnerabilities within critical security operations. It opens the door for potential exploitation by adversaries, posing risks to both national security and the safety of individuals involved. Organizations must scrutinize their data security measures and ensure robust protocols to prevent similar incidents in the future.
Source: arstechnica.com
