Hackers Publish Work Details of 41,000 Homeland Security Employees
Current overview (not historical)
Distributed Denial of Secrets published the Icepick dataset on Oct. 28, exposing work details for 41,191 U.S. Department of Homeland Security employees and contractors. The leaked archive includes names, titles, offices, email addresses, phone numbers, and manager information, with over 55,000 internal permission groups listed. DHS has not commented on the breach.
Written with AI from the reporting · updated 10/29/2026
Expand the detailed fact route and sources
Story route
A station-by-station route from the first public evidence onward; every station carries its own evidence and uncertainty.
- 1Unclassified fact stationOct 28, 00:00recorded Oct 30, 03:05single sourcerevised
Hackers Publish Work Details of 41,000 Homeland Security Emp
Read original source ↗ DecryptReplay this moment in the explorerEvidence & revisions · 1 source records
- Subject:
- Distributed Denial of Secrets
- Action:
- published dataset called Icepick
- Object:
- work details for 41,191 DHS employees and contractors
- Occurred (fact side):
- Oct 28, 00:00
- Published (valid side):
- Oct 30, 02:46
- First seen (known side):
- Oct 30, 03:05
Fact stationSingle source · one-sided claimRevisedCopy may have been revised later; time replay is bounded. Layer labels group reading only, not causation between layers.
Uncertainty marks flag where to check the sources; they are not proven causation.
Report timeline
Explore every side through dated source reports.
- DecryptRelated fact: single sourceSource report revisedHackers Publish Work Details of 41,000 Homeland Security Employees
Report first recorded Oct 30, 03:05
Distributed Denial of Secrets published the Icepick dataset on Oct. 28, containing work details for 41,191 Department of Homeland Security employees and contractors, including 21,329 from Customs and Border Protection and about 10,000 from ICE. The hacktivist group Department of Peace claims it obtained the records from an Okta single sign-on service used by DHS, though Okta denies any compromise. The dataset includes names, job titles, office locations, phone numbers, and internal permission groups, raising security concerns about potential impersonation and doxxing.
Read original source ↗
Event activity trend
- Latest comparable
- 3
- Comparable peak
- 10Oct 30, 04:00
- 24h change
- -49%
The chart compares consistently observed participants only. Hover or tap to inspect each hour; use arrow keys to move between observations.
Event discussion
Reader opinions are hosted on GitHub Discussions; posting requires a GitHub account. Comments are not verified facts.