Skip links

Thousands of US Immigration Agent Details Exposed in Significant Cyber Hack

Details regarding over 41,000 employees of the US Department of Homeland Security (DHS), including many involved in immigration enforcement, have been made public due to a security breach. This incident exposes the names, workplace addresses, and phone numbers of DHS personnel, which notably includes agents from Immigration and Customs Enforcement (ICE) and Customs and Border Protection (CBP).

This leak is the third significant incident in recent weeks where government entities have suffered from similar cyber violations. A spokesperson for DHS stated that the agency is addressing the situation promptly and is committed to ensuring the safety of its staff. “We take all security threats against our employees and officers seriously and will work to ensure all are properly protected,” the spokesperson noted.

The breach has garnered attention as a group named Department of Peace accessed sensitive information from DHS and collaborated with journalist and cybersecurity researcher maia crimew and the platform Distributed Denial of Secrets to publish it online. The information has been compiled into a database known as Icepick.

Among the leaked data, it is reported that over 21,000 agents work for CBP, while nearly 6,600 are affiliated with ICE. There are also records of personnel from Homeland Security Investigations, the Federal Protective Service, and even those working for the Cybersecurity and Infrastructure Security Agency.

Included in this data are numerous operation names that were previously undisclosed, along with the agents responsible for these operations and the technology utilized, such as equipment from Cellbrite and Palantir.

According to Emma Best, a co-founder of DDoSecrets, the intention behind the leak was not to create a comprehensive directory of every DHS agent, but rather to substitute “anonymity with accountability.” Best elaborated that the leak highlights officials overseeing covert operations and aims to draw attention to the government’s approach toward whistleblowers and immigration enforcement.

The BlueLeaks incident, which involved a significant leak of police data in 2020, was referenced as a key point of comparison. A representative from the Department of Peace pointed to actions taken by ICE agents as motivation for their hacking of DHS records. “On July 17th, Markwayne Mullin said he was ‘turning up the heat’. This is what happens to ICE when you do that,” the spokesperson commented.

Markwayne Mullin, who became Secretary of Homeland Security in March, was called out specifically in relation to these events. Reports indicate that the Department of Peace accessed the DHS profiles through a single sign-on service known as Okta, which is commonly used by organizations for secure access to internal networks.

A representative from Okta affirmed the company’s security integrity, stating, “Okta is secure, and we have no evidence our data or systems were compromised.” Recently, the FBI also faced a hacking incident by a group known as ShinyHunters, leading to personal information of numerous agents being compromised. Additionally, the Federal Election Commission has been temporarily taken offline in response to suspected hacking attempts.

Public sentiment regarding US immigration enforcement has notably intensified, especially during the Trump administration, which escalated deportation and arrest operations. This year alone, immigration enforcement actions have reportedly resulted in violence, with numerous incidents involving ICE agents leading to fatalities, raising serious concerns about accountability.

Since President Donald Trump resumed office in 2025, there have been nearly 1 million deportations, with a staggering 70% of those involving individuals with no documented criminal history. These developments continue to highlight the complexities and controversies surrounding immigration policy in the United States.

Editor’s Take

This significant breach of DHS employee data underscores vulnerabilities within government cybersecurity measures and raises critical questions about the accountability of law enforcement agencies. As public scrutiny of immigration enforcement intensifies, this incident may provoke further debate about transparency and the ethical obligations of government entities. Users and advocates concerned about civil liberties will likely be more vigilant regarding data privacy and security protocols across agencies.

Source: www.bbc.co.uk