Details of more than 41,000 personnel working for the United States Department of Homeland Security (DHS), including thousands of immigration enforcement officers, have been exposed in a major data leak, raising fresh concerns about government cybersecurity and the safety of federal agents.
The information, published on Wednesday, includes names, official contact details, job titles and work locations of employees across several agencies, including Immigration and Customs Enforcement (ICE) and Customs and Border Protection (CBP).
Reuters reported that the data covered more than 40,000 personnel, although it could not independently authenticate the entire collection. The leak, described as unprecedented in scale, was published by Distributed Denial of Secrets, a nonprofit organisation known for making leaked information available to journalists and researchers.
The database, named Icepick, was reportedly supplied by a group calling itself the Department of Peace, alongside cybersecurity researcher and hacker Maia Crimew.
According to the published records, more than 21,000 personnel were associated with CBP, while nearly 6,600 worked for ICE. Other agencies represented included Homeland Security Investigations, the Federal Protective Service and the Cybersecurity and Infrastructure Security Agency.
Beyond staff identities, the material reportedly contains information about operational structures, undercover assignments, internal access groups and surveillance technology used by some personnel.
DDoSecrets co founder Emma Best said the publication was intended to promote accountability rather than merely provide a directory of government employees. She argued that the information could help journalists and investigators examine the officials responsible for immigration enforcement and covert operations.
However, the disclosure has also raised concerns that publicly exposing personnel information could put officers and their families at risk, particularly those involved in sensitive investigations.
The group claimed it obtained the records through Okta, a single sign on service used by organisations to manage access to internal systems. An Okta spokesperson said the company was aware of the allegations but had no evidence that its systems or data had been compromised.
DHS had not immediately responded to requests for comment, according to reports published on Wednesday.
The incident comes amid growing scrutiny of the department’s digital security. A September 2026 report by the Department of Homeland Security’s inspector general identified serious access control weaknesses within CBP systems, including excessive privileges and delays in disabling some former employees’ accounts.
The latest disclosure also follows a reported breach involving FBI personnel information and a suspected cyberattack affecting the Federal Election Commission.
Meanwhile, President Donald Trump’s intensified immigration enforcement programme has generated protests and legal challenges across the United States. Reports of fatal shootings involving immigration officers have further heightened public scrutiny of the agencies.
The leak therefore presents authorities with a difficult challenge: protecting sensitive personnel information while ensuring that government agencies remain accountable for their actions.
