U.S. Department of Homeland Security Data Breach Exposes Thousands

The emblem of the U.S. Department of Homeland Security was on display at the U.S. Immigration and Customs Enforcement building in Washington, D.C., as of January 7, 2026. A hacking group infiltrated the personnel files of the Department of Homeland Security, revealing the private information of over 40,000 agents and associates, including those in undercover operations.

A representative from the hacktivist group, Department of Peace, stated, “On July 17th, Markwayne Mullin said he was ‘turning up the heat.’ This is what happens to ICE when you do that.” The group’s statement revealed that the data was stolen by exploiting DHS’s single sign-on system.

Distributed Denial of Secrets received the information and published it online in a database named Icepick. Department of Peace also shared the data with U.S. journalist Ryan Ottignon and a Swiss hacker, maia arson crimew, who worked together to create a searchable online database. Crimew handled all technical aspects, according to Ottignon.

Emma Best, cofounder of DDoSecrets, described the leak as “extraordinary but deceptive in its simplicity,” highlighting the clear identification of officials behind DHS’s covert operations and deportation programs. Activists believe the data will aid those filing freedom of information requests, which often require specific details to produce meaningful results.

DHS acknowledged they were “aware of a potential breach” and are addressing it promptly to ensure proper protection for affected individuals. The breach involves over 21,000 records of U.S. Customs and Border Protection employees, alongside 10,000 related to Immigration and Customs Enforcement and Homeland Security Investigations personnel.

This occurrence follows previous hacking incidents at the FBI and affects about one-fifth of DHS’s workforce of over 220,000. Ottignon dismissed claims that he was doxing government employees, stressing the importance of oversight in a free society. He stated, “We are in a situation where public officials hide their identity, often wearing masks or plain clothes, and carry out unspeakable actions. Such behavior is unacceptable.”

Ottignon emphasized the necessity of governmental oversight and described his activities as part of that process. DDoSecrets added in a note, “They have our information, so it’s only fair that we have theirs.”