DHS Data Breach Exposes Personal Details of More Than 41,000 US Immigration and Security Personnel

Personal and professional details of over 41,000 employees of the United States Department of Homeland Security (DHS) have been leaked online. This includes names, addresses, phone numbers and roles of those working at several federal agencies who are involved in enforcing immigration and national security. 
The data was leaked on October 29, 2026 and shows that over 21,000 people work within Customs and Border Protection (CBP) with almost 6,600 working within Immigration and Customs Enforcement (ICE). Other agencies affected include Homeland Security Investigations, Federal Protective Service and Cybersecurity and Infrastructure Security Agency.

The breach was carried out by a group known as the Department of Peace. 
They accessed personal profiles using a single sign-on service known as Okta. The information was then shared by journalist and cybersecurity researcher maia crimew alongside Distributed Denial of Secrets (DDoSecrets).

The leaked information also includes the names of secret government operations, people involved and information on the technology used by investigators. Some of the tools include those provided by Cellebrite and Palantir.

Emma Best, co-founder of DDoSecrets said the leak was aimed to shine a light on the officials involved in government operations. 
However, the information includes people involved with undercover operations, investigations into government leaks and deportation.

The Department of Peace have cited the actions of immigration enforcement officials as the reason for the breach. The DHS have admitted they are aware of the potential breach and are working to resolve this. They have also said employee safety is a priority. Okta have also confirmed they are aware of the claims but have said there is no evidence that their systems or data have been breached.

This comes after a number of cybersecurity issues within US government agencies. 
In September 2026 the FBI were targeted by hacking group ShinyHunters. They were able to gain personal information of thousands of agents. The Federal Election Commission also suffered an outage recently after a suspected hacking attack.

This breach is particularly worrying as immigration enforcement often carry out operations with their faces covered and minimal identification. This makes having their work details and operations known a potential security risk for employees and their families. 
The breach comes at a time where US immigration enforcement has been under increased scrutiny. Since Donald Trump returned to office in 2025 nearly one million people have been deported from the country. Over 70% of these people had no criminal record.

This article has been indexed from CySecurity News – Latest Information Security and Hacking Incidents