Data breach affects DHS employees

More than 40,000 employees of the U.S. Department of Homeland Security (DHS) had their personal and professional data leaked. The information was obtained by a hacking group called Department of Peace and later published by the organization Distributed Denial of Secrets (DDOS), which focuses on exposing leaked information.

Hackers created a search tool

The hackers developed a tool named Icepick that allows detailed searches of employee names, offices, and assignments. They explained to the media outlet Techcrunch that having access to this information is a natural consequence of the data exchange.

Data accessed through Okta system

The breach occurred through the Okta single-sign-on system, which DHS employees and contractors use to access the department's network. The leaked data includes names, job functions, email addresses, office locations, and phone numbers of affected individuals.

Scope and impact of the leak

Activist Maia Arson Crimew, speaking on behalf of DDOS, called the data set "enormous" in both size and impact. The information offers a detailed look into the structure of the DHS, including roles within agencies such as ICE (Immigration and Customs Enforcement).

Details on affected personnel

The leaked data concerns approximately one-fifth of the DHS workforce, which totals nearly 220,000 people. About 21,000 files relate to employees of the U.S. Customs and Border Protection (CBP), while others pertain to 10,000 ICE agents and slightly fewer than 1,000 employees of CISA, the cybersecurity agency.

Surveillance tools revealed

The leaked data also includes information about the surveillance and cybersecurity tools accessible to DHS employees. It mentions Penlink, a company that provides tracking technology for mobile devices, and tools like Penlink PLX and Mobile Fortify used for facial recognition and real-time intelligence analysis.

Other tools and user groups

Other user groups include those linked to the mental health platform Headspace and the AI chatbot ChatGPT. These tools were used by ERO (ICE expulsion unit) employees and senior DHS officials, though it is unclear if the vulnerability that allowed the breach has been fixed.

Okta and DHS respond

Okta, the company behind the single-sign-on system, stated that its systems are secure and no evidence of a breach was found. The DHS confirmed it is aware of a potential vulnerability and is working to resolve the issue, emphasizing its commitment to protecting employees and agents.