Thousands of US Immigration Agents’ Details Leaked in Major Hack

Details of more than 41,000 personnel working for the US Department of Homeland Security (DHS), including thousands involved in immigration enforcement, have been leaked online. The data, which includes names, work addresses, and phone numbers of DHS staff working with Immigration and Customs Enforcement (ICE) and Customs and Border Protection (CBP), was accessed through a single sign-on service called Okta and published in a database named Icepick by a group called the Department of Peace, alongside journalist maia crimew and the website Distributed Denial of Secrets. According to the data, over 21,000 of those affected work for CBP, and nearly 6,600 work for ICE, with other records detailing agents from Homeland Security Investigations, the Federal Protective Service, and the Cybersecurity and Infrastructure Security Agency. The leak also includes previously unknown operation names, the agents involved, and some of the technology used, including tools from Cellbrite and Palantir.

The Department of Peace stated the hack was a response to actions by ICE agents, referencing comments made by Secretary of Homeland Security Markwayne Mullin. Emma Best, a co-founder of DDoSecrets, said the aim of the leak was to replace “anonymity with accountability,” identifying officials responsible for covert operations, investigations into leaks, and deportation programs. DDoSecrets previously hosted data from the 2020 BlueLeaks hack. A DHS spokesperson stated the agency is aware of a potential breach and is working to address it, adding they take security threats against employees seriously. The leak marks the third time in recent weeks a government agency has been targeted by a hack or leak.

Background

• The US Department of Homeland Security (DHS) encompasses agencies like Immigration and Customs Enforcement (ICE) and Customs and Border Protection (CBP) responsible for border security and immigration enforcement [background knowledge].
• In October 2026, the Department of Justice charged 28 green card holders with illegal voting in California, sparking a dispute with the state over voter eligibility verification [Fact Refinery, 2026-10-19].
• Also in October 2026, thousands of observers were preparing to monitor US polling places amid concerns about election interference and potential ICE presence at polls [Fact Refinery, 2026-10-26].
• Recent weeks have seen multiple hacks or leaks targeting US government agencies [article text].

Our reading

Our reading is that this leak represents a significant escalation in the conflict between activist groups and immigration enforcement agencies. The deliberate targeting of personnel data, coupled with the stated aim of replacing anonymity with accountability, suggests a calculated effort to disrupt ICE and CBP operations and publicly identify those involved in controversial policies. The involvement of Distributed Denial of Secrets and maia crimew indicates a sophisticated operation with a history of data breaches and a commitment to transparency, however disruptive.

What to watch

• Whether DHS can successfully mitigate the damage from the leak and secure its systems against further breaches [DHS official statements].
• If the Department of Peace releases additional leaked data or takes further action targeting DHS personnel [Department of Peace online channels].
• Any legal action taken against those responsible for the leak, and whether the DOJ frames it as a matter of national security [court records, DOJ press releases].

Was this useful? 👍 0 👎 0

---

Read the original coverage