A massive data leak has exposed records on roughly 41,000 Department of Homeland Security employees, including undercover Immigration and Customs Enforcement agents, according to WIRED. The records cover DHS and seven component agencies, including ICE and Customs and Border Protection, and were last updated on August 19, 2026. The transparency nonprofit Distributed Denial of Secrets published the archive, which it calls "Icepick," after cybersecurity researcher and journalist maia arson crimew previewed the data for WIRED. The group says it obtained the files from a group calling itself the Department of Peace, pulled from DHS's Okta login system. I normally spend my time warning readers about scams and bad deals before they get hurt, but this leak is worth flagging because of how deeply it touches federal workers and the systems meant to protect sensitive investigations.
How to spot it
- The leaked files reportedly include more than 55,000 internal permission groups, some referencing certified undercover operations, wiretap programs and surveillance tools like Palantir's Falcon platform and PenLink.
- Records reportedly show access to AI tools including ChatGPT, Gemini, Copilot and a "Grok.com" group tied to DHS technology officials.
- More than 700 accounts are tied to a group apparently referencing Signal, and over 200 CBP accounts reference Mobile Fortify, a face-recognition app used by immigration agents.
- Senior leadership names appear more than 300 times, including former DHS head Kristi Noem, and most records list a supervisor, which could let someone reconstruct reporting relationships across the agency.
What to do if it happened to you
Okta told WIRED it is unaware of any breach of its own systems and says it has no evidence its data or systems were compromised. A Homeland Security spokesperson said DHS is aware of a potential breach and is "actively working to address the situation swiftly and effectively," adding that the agency takes all security threats against its employees and officers seriously and will work to ensure they are properly protected. DHS said it will update the public when more information is available. The DOJ did not respond to WIRED's request for comment, and the FBI referred inquiries to DHS.
The leak follows a separate breach in which hackers known as ShinyHunters claimed to steal personal data on nearly every FBI employee and their families, a case in which law enforcement has already made several arrests. National security expert Alexander Leslie told WIRED the newly leaked dataset, if authentic, could be an "extraordinarily valuable intelligence resource" for anyone trying to penetrate DHS, especially when combined with other compromised data. Civil liberties attorney Adam Steinbaugh argued that much of the exposed information, like names and job titles, resembles what would appear on a business card and should not be treated as a crime to share.
Source: WIRED
