Database exposes details of more than 41,000 US homeland security staff

BBC Technology ·

A group called the Department of Peace and cybersecurity researcher maia crimew published details about more than 41,000 Department of Homeland Security personnel, including thousands involved in immigration enforcement. The leak raises concerns about staff privacy and security, while its publishers say it is intended to increase accountability for officials overseeing covert operations and deportation programmes.

The database, named Icepick, reportedly contains staff names, work addresses, phone numbers and descriptions of their roles, including at Immigration and Customs Enforcement and Customs and Border Protection. The Department of Peace said it accessed the profiles through Okta, a single sign-on service; Okta said it had no evidence that its systems or data were compromised. The disclosure follows a recent hack of the FBI that exposed information about thousands of agents, and a suspected attack that took the Federal Election Commission offline.

In short

  • Details of more than 41,000 DHS personnel were published.
  • The leak includes contact details and descriptions of staff roles.
  • Okta says it has no evidence its systems were compromised.

Steelman: both sides, in good faith

The strongest fair case each way — we don't pick a winner.

The case for

Publishing the database could help the public scrutinise agencies whose immigration enforcement and covert operations have significant effects on people’s rights, particularly when ordinary oversight is difficult. Supporters may argue that identifying officials involved in these programmes makes accountability more tangible and can expose practices that would otherwise remain hidden.

The case against

Releasing personal and work contact details for tens of thousands of staff risks harassment, threats and harm to employees and their families, including people whose roles do not involve setting policy. Critics may argue that broad exposure is disproportionate to the goal of accountability, which can be pursued through targeted reporting and institutional oversight without creating such risks.

Explained simply

The Department of Homeland Security is a US government department responsible for areas including border security and immigration enforcement. Its agencies include Immigration and Customs Enforcement, which enforces immigration laws within the country, and Customs and Border Protection, which manages the borders and ports of entry.

The database is said to include names and work contact details of department staff, along with descriptions of their jobs. Its publishers say they wanted to draw attention to officials involved in enforcement programmes; the disclosure has also prompted concern about the privacy and safety of public employees.

The report says the profiles were accessed through Okta, a service organisations use to manage staff log-ins to work systems. Okta says it has found no evidence its systems or data were compromised, and the disclosure comes amid other recent cyber incidents involving US government agencies.

Americas Art Culture Cybersecurity Technology World

Read the full article at the source →

Originally published by BBC Technology as “Details of thousands of US immigration agents leaked in major hack”.

Log in to join the discussion