Facts
- A DHS data leak published searchable records on more than 41,000 current and former Department of Homeland Security employees and contractors, Nextgov/FCW reported on Wednesday, October 28, 2026.
- The records include names, phone numbers, email addresses, job titles and internal group memberships. They cover ICE, CBP, CISA and other DHS components. Some entries describe roles involving ‘surveillance, computer forensics and undercover work,’ according to Nextgov.
- Distributed Denial of Secrets (DDoSecrets), a transparency group, said it received the data from a hacktivist group called the Department of Peace. The group said it obtained the records through an identity service used by DHS. It previously claimed a DHS hack involving contractor records in March, Nextgov reported.
- The group said the leak responded to DHS Secretary Markwayne Mullin’s pledge to intensify immigration enforcement.
- The hackers said they collected the data from an Okta single sign-on service used by DHS. Okta said it has no evidence its data or systems were compromised.
- DHS said it is ‘aware of a potential breach and is actively working to address the situation swiftly and effectively,’ and said it would provide more information when available.
- Nextgov corroborated portions of the data, including a work phone number it had obtained independently. Several other numbers belonged to AT&T, which provides services to DHS, and LinkedIn profiles matched listed job titles. Some records are historical, including CISA employees who have since left.
- Nextgov noted that publishers framed the data as a public accountability tool, while exposed assignments and professional connections could help malicious actors target sensitive personnel or craft convincing impersonation attempts.
- This article does not link to or reproduce the leaked records.
Quotes
A Department of Peace spokesperson: “On July 17th, Markwayne Mullin said he was ‘turning up the heat.’ This is what happens to ICE when you do that.”
Okta: “Okta is secure, and we have no evidence our data or systems were compromised.”
DHS: it is “aware of a potential breach and is actively working to address the situation swiftly and effectively.”
Source Read Nextgov/FCW’s report here.
Image Department of Homeland Security new Headquarters ceremony (46671823855), public domain.



