A hacktivist group known as the Department of Peace has published personal information belonging to over 41,000 employees of the U.S. Department of Homeland Security (DHS). The data, which includes details on Immigration and Customs Enforcement (ICE) and Customs and Border Protection (CBP) agents, was released online in a searchable database.

The group claims to have obtained the records by exploiting the Okta single sign-on service used by DHS employees to access various internal systems. The leaked information reportedly contains employee names, offices, contact details, and specific job assignments. Some reports indicate that the data also includes details about undercover agents and technology used in their operations.

The Department of Peace stated that the breach was a retaliatory action following remarks made by DHS Secretary Markwayne Mullin on July 17, during which he indicated an intensification of immigration enforcement efforts. A spokesperson for the group stated, "On July 17th, Markwayne Mullin said he was 'turning up the heat.' This is what happens to ICE when you do that."

The nonprofit organization Distributed Denial of Secrets (DDoSecrets) received the data from the hacktivist group and made it publicly accessible through a database named "Icepick." Swiss hacker maia arson crimew, in collaboration with journalist Ryan Ottignon, also created a searchable version of the database. DDoSecrets co-founder Emma Best described the leak as "extraordinary but deceptive in its simplicity," noting that it connects officials involved in covert operations with those managing deportation programs.

DHS acknowledged awareness of a "potential breach" and stated it was "actively working to address the situation swiftly and effectively." The agency emphasized that it takes security threats against its employees seriously and is working to ensure their protection. Current and former DHS officials have described the leak as a "nightmare scenario" that could place agents and their families in significant danger and potentially compromise ongoing investigations.

This incident follows other recent data leaks involving federal personnel. In September, a group known as ShinyHunters claimed to have stolen thousands of FBI employee records. In January 2026, personal information of approximately 4,500 Border Patrol and ICE employees was leaked to a website called ICE List.

Okta, the identity service provider implicated in the breach, stated it has "no evidence our data or systems were compromised."