What happened
A hacking group breached personnel files at the U.S. Department of Homeland Security on Wednesday, according to NPR. The files exposed the names, phone numbers and home addresses of more than 40,000 DHS agents, operatives and associates, including people involved in undercover operations.
The group, which calls itself the Department of Peace, described the hack in an online statement. A spokesperson tied it to a remark by Markwayne Mullin. "On July 17th, Markwayne Mullin said he was 'turning up the heat.' This is what happens to ICE when you do that," the spokesperson said. The group also said it obtained the data by subverting DHS's single sign-on system, according to an online post.
By NPR's tally, more than 21,000 of the records identify employees of U.S. Customs and Border Protection. Another 10,000 or so relate to employees of Immigration and Customs Enforcement and its Homeland Security Investigations unit.
How the data spread
The Department of Peace said it passed the material to Distributed Denial of Secrets, a group that publishes leaked records. DDoSecrets posted it online in a database called Icepick. The hackers also shared the trove with Ryan Ottignon, a U.S.-based journalist, and with a Swiss activist known as maia arson crimew.
Ottignon told NPR that the two of them built a searchable online database from the files, and that crimew did all of the technical work. NPR reported that a note attached to the files read, "They have our information, so it's only fair that we have theirs." The outlet added that an earlier version of its story wrongly credited that line to DDoSecrets, when the Department of Peace wrote it.
Supporters defend the release
DDoSecrets cofounder Emma Best called the leak "extraordinary but deceptive in its simplicity." Best said it makes explicit connections between "officials responsible for overseeing covert and undercover operations" and key personnel in DHS's rendition and deportation programs.
Other activists told NPR the information could help people who investigate DHS and file freedom of information requests. Such requests, NPR noted, often produce useless results because they lack specifics such as names and email addresses.
Ottignon, who has worked on similar data-leak projects, rejected the idea that he and others connected to the release were doxing government employees. He argued that public officials are traveling through cities and states while seeking to hide who they are, often using masks and plain clothes. "We need oversight for useful government, if it exists at all. So this is just one step in that oversight process," he said.
DHS response and open questions
In a statement, DHS said it was "aware of a potential breach and is actively working to address the situation swiftly and effectively." The department added that it is taking necessary steps to "ensure all are properly protected."
NPR described the incident as an unprecedented breach of intelligence that follows similar hacking attacks at the FBI. It also noted the limits of the data. The database is far from comprehensive and represents roughly a fifth of a DHS workforce of a little more than 220,000 people.
Headlines from other outlets that accompanied NPR's report suggest the fallout is widening. They point to a White House official condemning the breach and saying ICE agents "have families, too," and to DHS citing a doxxing threat to more than 40,000 people as it tries to get the data taken offline. Another headline says Bluesky is blocking links to the leak. The source material does not detail those developments, and the full scope of the response is not yet clear.
