The Department of Homeland Security had the personal details of more than 41,000 of its own employees—including undercover ICE agents and Border Patrol personnel—stolen and published online by a hacktivist group, and the agency tasked with protecting the homeland responded with a boilerplate statement about working "swiftly and effectively." If Mayorkas's DHS can't keep its own personnel files locked down, nobody should trust it to lock down the southern border.
The breach exposed names, phone numbers, email addresses, office locations, and job titles of roughly a seventh of DHS's workforce. Of those, 21,000 work for Customs and Border Protection and 10,000 for ICE, including a third from Homeland Security Investigations, the criminal investigative arm that targets cartels and fentanyl networks. Fox News confirmed that the leaked records include the names of several undercover ICE agents working across the country. Sources familiar with the data described the incident as "catastrophic."
A group calling itself the Department of Peace claimed responsibility, saying it acted in retaliation for DHS Secretary Markwayne Mullin's July 17 press conference where he said the agency was "turning up the heat on the streets." That press conference followed the fatal shootings of two men—Joan Sebastian Duran Guerrero of Maine and Lorenzo Salgado Araujo of Houston—neither of whom were targets of ICE enforcement. "They have our information, so it's only fair that we have theirs," the hackers wrote.
The stolen data was handed to the transparency nonprofit Distributed Denial of Secrets and a Swiss hacker known as maia arson crimew, who built a searchable online database called "Icepick." DDoSecrets co-founder Emma Best called the leak "extraordinary but deceptive in its simplicity," saying it makes explicit the connections between officials running covert operations and those overseeing "ever-escalating rendition and deportation programs."
NPR and Engadget gave generous airtime to that framing. NPR quoted journalist Ryan Ottignon, who helped publish the database, rejecting the word "doxxing" and calling the breach "one step in that oversight process." That's a convenient euphemism for publishing the home contact details of undercover agents who investigate drug cartels—organizations that have their own cyber capabilities and no shortage of willingness to kill.
The hackers say they got in through Okta, the single sign-on service DHS uses to manage access across its systems. Okta told Reuters it has "no evidence" its data or systems were compromised. DHS offered its standard line: "We take all security threats against our employees and officers seriously."
This is the third major government personnel breach in a month. In September, ShinyHunters claimed a massive trove of FBI employee data. Last week, the Pentagon faced a class action lawsuit after a breach exposed records on more than 2.76 million living military and civilian personnel. The federal government can't keep a firewall intact, but it insists it can manage an open border with Mexico.
Reuters independently verified the DHS breach by matching leaked details to credit bureau records and calling three employees directly. One said it was the first they'd heard of it. So much for taking threats seriously.
The same bureaucracy that has presided over millions of illegal crossings, enough fentanyl to kill every American twice over, and cartel operations in every major city just proved it can't even protect its own people from a group of ideologically motivated hackers. The question isn't whether DHS is incompetent. It's what else they're failing to secure that we don't know about yet.
