ICE and CBP Agents Exposed in Massive DHS Identity Leak

A reported DHS data leak has exposed names and contact details tied to more than 41,000 employees and contractors, including ICE and CBP personnel. DDoSecrets, a nonprofit transparency collective, published the material in an online archive it calls “Icepick.”

The files reportedly include email addresses, phone numbers, office locations, and references to internal systems. They also point to undercover and surveillance programs, making the disclosure more than a routine employee directory leak. A searchable collection linking personal contacts to agency structure could reveal how parts of DHS operate.

Then the Leak’s Origin Became a Question

The biggest uncertainty is the archive’s source. DDoSecrets says the records came from DHS’s Okta login system, but it has not identified whoever supplied the data. Instead, the collective refers to that source as the “Department of Peace.”

Okta rejects the breach claim, saying it has no evidence that its systems or data were compromised.

In a note attached to the files, the hackers framed the release as payback for information they said the government already had. That explanation does not settle how the material was obtained or whether every entry is accurate.

DDoSecrets and cybersecurity researcher and journalist maia arson crimew previewed the records for WIRED. Crimew built the search site and told WIRED, “I don’t think we should let them scare us into not looking into them.”

The Records Show How Wide the Exposure May Be

WIRED’s analysis says the collection spans DHS and seven component agencies. The files were last updated August 19, 2026. CBP staff make up more than half the records. ICE accounts for about 10,000 entries, with roughly one third of those entries tied to Homeland Security Investigations.

USCIS appears in about 6,200 records, while nearly 1,000 are linked to CISA. More than half of the CISA entries involve contractors. Together, the files cover about a seventh of the DHS workforce and show how widely the archive reaches across the department.

The reported material references groups tied to wiretap programs, Palantir software, and xAI’s Grok chatbot, along with other internal systems. It also includes references to undercover and surveillance work.

The disclosure arrives amid a broader fight over DHS secrecy and scrutiny. Since the start of the second Trump administration, DHS and the federal government have moved to hide employee names and faces. The agency has also sought to identify anonymous social media users, obtain customer records on protesters, and seek warrants for surveillance tools aimed at reporters. It expanded “doxing” to include basic facts about public employees, including names and titles.

The source also describes a separate claim by ShinyHunters involving personal information on nearly every FBI employee and their families. It says law enforcement arrested several suspects and detained another person alleged to be connected to the group.

Why It Matters

This matters because the reported archive combines personal contact information with clues about how a major federal department is organized. For employees and contractors, names, phone numbers, email addresses, and office locations become more consequential when they appear beside references to internal systems and sensitive work. For the public, the material may provide a clearer view of agencies whose operations are often difficult to inspect. That creates a real tension between accountability for government activity and privacy for personnel who may not control how their information is published.

The source describes DHS pursuing information about critics, anonymous users, protesters, and reporters while the government works to limit public release of employee identities. The hackers’ explanation presents the archive as payback, but that claim does not settle whether the records were obtained lawfully, whether they are complete, or whether publishing them was justified. The unresolved questions are therefore central: who supplied the files, how they were accessed, how accurate the entries are, and what response will follow.

DHS and the Justice Department did not respond to WIRED’s request for comment, while the FBI sent the inquiry to DHS. Okta’s denial leaves the central technical question unresolved: the archive is now searchable, but the report still does not establish how the files left DHS systems or whether the claimed Okta connection is correct.

Source: WLT Report