Hacker exposes personal and work details of 40,000 US security staff
A hacker published personal and work-related information about more than 40,000 US Department of Homeland Security employees, following a breach earlier this year. The exposed records include staff from border and immigration agencies, cybersecurity teams and senior officials; the leak offers a partial view of the department’s workforce and operations.
The data reportedly came from an Okta sign-in system and includes names, job titles, contact details, office locations and some IT access records. Around 21,000 entries relate to Customs and Border Protection, about 10,000 to Immigration and Customs Enforcement and its investigations unit, and just under 1,000 to CISA. The records appear to have been taken around mid-August and represent roughly one-fifth of the department’s 220,000 staff; the publication verified a sample against an offline database copy.
In short
- More than 40,000 DHS employee records were published online.
- The leak includes staff from CBP, ICE and CISA.
- The records may expose contact and internal access details.
Explained simply
The Department of Homeland Security is a US government department responsible for areas including border control, immigration enforcement and protection against cyber attacks. Its agencies include Customs and Border Protection, Immigration and Customs Enforcement, and the Cybersecurity and Infrastructure Security Agency.
Okta provides systems that let staff sign in to workplace services. Information linked to staff can include contact details and job roles, while access records may reveal something about the systems they use. Such information can raise privacy and security concerns for employees and their department.
Read the full article at the source →
Originally published by TechCrunch as “Hacker stole personnel data about thousands of Homeland Security employees, including CBP and ICE agents”.