Hackers Leak Details of 41,000 US Homeland Security Personnel in Major Data Breach

A major data breach has exposed information linked to more than 41,000 employees and contractors of the United States Department of Homeland Security (DHS), including personnel working in immigration enforcement, border security, surveillance and undercover investigations.

The information was reportedly published online on Wednesday, October 28, 2026, in a searchable database containing names, telephone numbers, email addresses, job titles, office details and work assignments.

The disclosure has raised concerns about the safety and privacy of thousands of US security personnel, particularly those involved in sensitive operations whose identities and professional responsibilities may not previously have been publicly known.

According to reports, the leaked records include personnel from Immigration and Customs Enforcement (ICE), US Customs and Border Protection (CBP), Homeland Security Investigations and the Cybersecurity and Infrastructure Security Agency (CISA), among other DHS components.

Some of the information reportedly identifies officers and employees assigned to surveillance, special operations, digital forensics and undercover duties.

The exposure of such information could create security risks for affected personnel and their families, while potentially compromising sensitive investigations and operational activities.

The DHS confirmed that it was aware of a potential security breach and was working to address the situation.

The department said it was taking steps to protect its employees and would provide further information when more details became available.

How the Data Was Leaked

The disclosure was linked to an entity calling itself the Department of Peace, which reportedly provided the information to Distributed Denial of Secrets, a nonprofit organisation that publishes leaked documents and datasets.

READ ALSO:

• Eight Days After Abduction, Kidnappers Demand ₦50m for Nasarawa Teacher
• N1m Minimum Wage Will Collapse Nigeria’s Economy, Ajaero Warns
• Ajaero Fires Back at TUC Over Rejection of FG’s ₦70,000 Allowance

A Swiss hacker and journalist known online as maia arson crimew subsequently developed a searchable database that allows users to browse the exposed records.

The group calling itself the Department of Peace reportedly justified the release by arguing that DHS collects information about members of the public and that the public should have access to information about the department’s personnel.

However, the precise circumstances surrounding the alleged intrusion remain unclear.

Distributed Denial of Secrets co-founder Emma Best said the information had been obtained through the Okta sign-on service used by DHS employees. The claim has not been independently verified.

Okta, the identity and access management company, said it had no evidence that its systems or data had been compromised.

Reuters reported that it could not authenticate the entire collection of leaked records. However, the news agency corroborated some employee details through external records and direct conversations with three DHS employees.

Some records reportedly contained information already available on public professional profiles, while others appeared to reveal non-public details about internal organisational structures, programmes and operations.

Security Concerns Over Exposed Personnel

The leak has raised concerns that publicly identifying employees involved in sensitive security operations could expose them to harassment, threats and other forms of targeting.

The disclosure of work assignments and internal contact details could also make it easier for malicious actors to identify personnel associated with particular investigations or operational units.

The risks may extend beyond individual employees to their families and colleagues, particularly if exposed information is combined with other publicly available records.

The incident also highlights the challenges facing government agencies responsible for protecting sensitive personnel information while maintaining accountability and transparency.

The Department of Peace reportedly presented the disclosure as an attempt to promote accountability. However, the publication of personal and operational information can create risks regardless of the motives claimed by those responsible.

Latest Developments and Previous US Government Breaches

The DHS incident comes amid a series of reported cybersecurity incidents involving US government institutions.

In September 2026, the FBI began investigating claims by the hacking group ShinyHunters that it had stolen sensitive information relating to bureau employees and job applicants through its recruitment website.

The Department of Defense has also faced scrutiny following a separate breach involving information associated with millions of current and former military personnel.

The latest DHS disclosure adds to concerns about the protection of sensitive government records and the potential consequences when employee information is accessed without authorisation.

As investigations continue, key questions remain about how the information was obtained, whether the entire dataset is authentic, which employees may be affected and whether the breach resulted from weaknesses in DHS systems or those of an external service provider.

For now, the department has acknowledged a potential breach but has yet to publicly establish the full scope of the incident or identify those responsible.