DHS Data Breach Exposes 40,000+ Employees Online

Personally identifiable information for over 40,000 U.S. Department of Homeland Security employees has been published online following a data breach earlier this year. The stolen data includes names, job titles, and work contact information like email addresses and phone numbers.

The hacker, known as 'Department of Peace', asserted that the data was exfiltrated from an Okta single sign-on system used by the department. This system facilitates employee and contractor access to Homeland Security's central network.

More than half of the leaked records, approximately 21,000, belong to U.S. Customs and Border Protection employees. An additional 10,000 records are from Immigration and Customs Enforcement (ICE) and its Homeland Security Investigations (HSI) unit.

Thousands of other records pertain to staff from agencies including CISA, U.S. Citizenship and Immigration Services, and the Federal Protective Service. The hacker expressed a sentiment of fairness, stating, "They have our information, so it's only fair that we have theirs."

This incident follows a series of recent data breaches impacting U.S. government entities. The exposed data reportedly appears authentic and was shared with a nonprofit collective for public interest hosting.

While the full extent of the breach and whether the vulnerability has been addressed remain unclear, the leaked information offers a glimpse into Homeland Security's operations. The data also reveals details about employees' access to surveillance tools and software, including a user group linked to online therapy provider Headspace and web surveillance company Penlink.

Involvement in user groups for facial recognition apps and AI tools like ChatGPT was also noted. Researchers suggest the exposed data could aid in investigations into alleged government abuses and facilitate public records requests.