Breach of U.S. Department of Homeland Security Personnel Files by Hacktivist Group

The emblem of the U.S. Department of Homeland Security located on the U.S. Immigration and Customs Enforcement building was visible on January 7, 2026, in Washington, D.C. A hacking group has penetrated the personnel files of the U.S. Department of Homeland Security, releasing names, phone numbers, and addresses of over 40,000 DHS agents, operatives, and affiliates. The exposed information includes those engaged in undercover operations.

A statement from the Department of Peace, the hacktivist group responsible, attributed the breach to actions taken by Markwayne Mullin on July 17, claiming it was a consequence of “turning up the heat” on ICE. They explained the data theft occurred by circumventing DHS’s single sign-on system. Subsequently, the data was shared with Distributed Denial of Secrets, which published it online in a database named Icepick.

The Department of Peace distributed the data further to journalists and hackers, including Ryan Ottignon and maia arson crimew. They collaborated to develop a searchable online database after crimew handled all technical aspects, Ottignon shared with NPR.

DDoSecrets co-founder Emma Best remarked that the leak was notable yet subtly complex, revealing connections between officials responsible for covert operations and those involved in DHS’s rendition and deportation programs. Activists believe this data will aid those investigating DHS or filing freedom of information requests, which often fail due to insufficient details, such as names and email addresses.

DHS acknowledged awareness of the breach and stated its commitment to quickly and effectively address the issue. Actions are underway to provide appropriate protection.

Details within the breach include over 21,000 records related to employees of U.S. Customs and Border Protection, along with 10,000 concerning Immigration and Customs Enforcement workers and Homeland Security Investigations personnel. This breach is a significant intelligence disruption, occurring after similar incidents targeting the FBI. However, the database covers only a fraction of Homeland Security’s workforce of over 220,000 employees.

Ottignon, experienced in handling similar data leaks, dismissed accusations of doxing government employees by those linked to the Department of Peace or Distributed Denial of Secrets. He argued that masked public officials often engage in unacceptable actions nationwide without oversight. Ottignon asserted the importance of oversight in maintaining functional governance.

In an attached note, DDoSecrets stated, “They have our information, so it’s only fair that we have theirs.”