Hacker Leaks Data on 40,000+ DHS Employees
Original: Hacker stole personnel data about thousands of Homeland Security employees, including CBP and ICE agents
Why This Matters
Repeated federal personnel breaches expose operational security risks at scale.
A hacker published personnel data on over 40,000 DHS employees—including CBP, ICE, and CISA staff—stolen from an Okta SSO system in an undisclosed breach earlier in 2026, exposing names, job titles, phone numbers, and system access details.
A hacker operating under the handle 'Department of Peace' has published personally identifiable information on more than 40,000 U.S. Department of Homeland Security employees, taken from what appears to be an Okta single sign-on system used across the department's agencies. The stolen records include names, job titles, work email addresses, cell phone numbers, office locations, and details about which internal systems each employee is authorized to access.
The largest share—roughly 21,000 records—belongs to U.S. Customs and Border Protection agents. Another 10,000 records cover Immigration and Customs Enforcement and its Homeland Security Investigations unit. Nearly 1,000 CISA employees are also in the dataset, along with staff from U.S. Citizenship and Immigration Services, the Federal Protective Service, and DHS headquarters.
In a note accompanying the data, the hacker wrote: 'They have our information, so it's only fair that we have theirs.' The hacker did not respond to TechCrunch's request for comment.
This is the second DHS breach attributed to the same actor this year; the first involved thousands of contracts between DHS and private-sector defense and surveillance vendors. It follows separate recent breaches exposing FBI personnel records and millions of military personnel files from the Pentagon's HR unit.