DDoSSecrets publishes hacked data concerning thousands of DHS employees
Department of Homeland Security systems
Hacktivists obtained and leaked sensitive data regarding more than 41,000 Department of Homeland Security employees. The leaked records were shared via DDoSecrets after being distributed by independent researchers.
why this severityConfirmed data leak of thousands of government employee records.
- first report
- 28 Oct 2026
- last update
- 29 Oct 2026
What to do
Monitor affected accounts and secure government internal portals.
Timeline · 4
- 28 Oct 2026Leak site publishes data on more than 41,000 DHS employees obtained by hacktivists
- 29 Oct 2026Reports indicate the personal and work information was stolen from an Okta single sign-on system earlier this year.
- 29 Oct 2026The leaked dataset is named Icepick and includes undercover ICE agents.
- 29 Oct 2026The leaked DHS employee dataset experiences hosting challenges and takedown requests
Sources · 4
News and write-ups
- 2026-10-28Leak site publishes data on more than 41,000 DHS employees obtained by hacktivistsCyberScoop · cyberscoop.com/dhs-employee-data-leak-ddosecrets
- 2026-10-29Over 41,000 DHS Employee Records Leaked OnlineSecurityWeek · securityweek.com/over-41000-dhs-employee-records-leaked-online
- 2026-10-29Hacktivists leak 41,000 DHS staff records, revealing undercover ICE agentsHelp Net Security · helpnetsecurity.com/2026/10/29/icepick-dhs-leak-ice-undercover-agents
- 2026-10-29Leaked DHS employee archive, Icepick, faces challenges to stay onlineCyberScoop · cyberscoop.com/dhs-employee-breach-icepick-database-takedown
Titles and links belong to their publishers. The summary above is written by gcdRadar in its own words; data is CC BY-SA 4.0.
Classification
- AI role
- No AI role
- categories
- General security
- severity
- 3 · Confirmed exploitation
- targets
- Not applicable
- owasp llm top 10
- no entry for these categories
- mitre atlas
- no technique for these categories
- dates
- happened 28 Oct 2026 · first reported 28 Oct 2026
- origin
- News & research feeds
- record
- confidence 0.95 · created 2026-10-29 00:20Z · updated 2026-11-13 00:11Z
Lane, AI role, categories and severity come from the classifier; the OWASP and ATLAS rows are derived from the categories. How these are assigned
Copy a brief
This record as a short Markdown brief, for a ticket, a chat or a coding agent.
the brief as text
# DDoSSecrets publishes hacked data concerning thousands of DHS employees https://gcdradar.vercel.app/incidents/ddossecrets-publishes-hacked-data-concerning-thousands-of-dh · AIR-2026-1628 · closed 2026-11-12 - Lane: Breaches & attacks - Severity: 3 (Confirmed exploitation): Confirmed data leak of thousands of government employee records. - Fix status: No fix needed - First reported: 2026-10-28 - AI role: No AI role - Products: Department of Homeland Security systems ## Summary Hacktivists obtained and leaked sensitive data regarding more than 41,000 Department of Homeland Security employees. The leaked records were shared via DDoSecrets after being distributed by independent researchers. ## What to do Monitor affected accounts and secure government internal portals. ## Latest updates - 2026-10-29: The leaked DHS employee dataset experiences hosting challenges and takedown requests (https://cyberscoop.com/dhs-employee-breach-icepick-database-takedown) - 2026-10-29: The leaked dataset is named Icepick and includes undercover ICE agents. (https://helpnetsecurity.com/2026/10/29/icepick-dhs-leak-ice-undercover-agents) - 2026-10-29: Reports indicate the personal and work information was stolen from an Okta single sign-on system earlier this year. (https://securityweek.com/over-41000-dhs-employee-records-leaked-online) - 2026-10-28: Leak site publishes data on more than 41,000 DHS employees obtained by hacktivists (https://cyberscoop.com/dhs-employee-data-leak-ddosecrets) ## Sources - 2026-10-28 CyberScoop: Leak site publishes data on more than 41,000 DHS employees obtained by hacktivists https://cyberscoop.com/dhs-employee-data-leak-ddosecrets - 2026-10-29 SecurityWeek: Over 41,000 DHS Employee Records Leaked Online https://securityweek.com/over-41000-dhs-employee-records-leaked-online - 2026-10-29 Help Net Security: Hacktivists leak 41,000 DHS staff records, revealing undercover ICE agents https://helpnetsecurity.com/2026/10/29/icepick-dhs-leak-ice-undercover-agents - 2026-10-29 CyberScoop: Leaked DHS employee archive, Icepick, faces challenges to stay online https://cyberscoop.com/dhs-employee-breach-icepick-database-takedown Verify against the vendor's advisory before changing production. Data CC BY-SA 4.0, https://gcdradar.vercel.app.
Related
- liveDixell refrigeration units Multiple vulnerabilities discovered in Dixell refrigeration units
Patch now · Exploited · since 13 Nov 2026
- live8.6UnrealIRCd CVE-2026-114713: UnrealIRCd improper neutralization of delimiters vulnerability
Patch now · Exploited · Partly patched · since 13 Nov 2026 · CVE-2026-114713
- liveCity of Osaka municipal systems City of Osaka suffers data breach impacting one million residents
Breaches & attacks · Real loss · since 13 Nov 2026
- liveUniversity of Texas at Arlington discloses data breach from cyberattack
Breaches & attacks · Exploited · since 13 Nov 2026
- livePDF viewers Genuine PDF Forgeries: Attacking Signature Verification via Human Factors
Research · since 13 Nov 2026
- liveAMD SEV-SNP Mior and Skyfall Attacks Target AMD SEV-SNP VMs
Research · since 13 Nov 2026