securityweek.comarticleOver 41,000 DHS Employee Records Leaked Online
A hacker using the handle Department of Peace leaked more than 41,000 US Department of Homeland Security employee records, which the hacker says came from an Okta single sign-on system. The data covers names, work emails, phone numbers, job titles, office locations and per-account system access, mostly for CBP, ICE and HSI staff plus about 1,000 CISA employees. Okta says it has no evidence of compromise. Distributed Denial of Secrets calls the dataset 'Icepick'.
TL;DR Hacker leaks 41,000+ DHS employee records, allegedly from an Okta SSO system, including system-access mappings; Okta denies compromise.
Organisations named here
- CISA
- Distributed Denial of Secrets
- FBI
- Gary Barlet
- Homeland Security Information Network
- Homeland Security Investigations
- Immigration and Customs Enforcement
- US Customs and Border Protection
Technologies named here
- Distributed Denial of Secrets
- Online search tool
- Homeland Security Information Network
- Okta
Techniques named here
- Targeting using access mapping
Threat actors named here
- Department of Peace
- Icepick
- ShinyHunters
Related in Threat Intel
huntress.comwriteupReverse Engineering the Six Stages of MacSync Stealer and RAT
huntress.comwriteupAI-Coded Malware | Analyzing Vibe-Coded AD Enumeration | Huntress
blog.talosintelligence.comtoolIntroducing CAIRN: Frontier tracking for AI-integrated malware (Cisco Talos)
huntress.comwriteup