Skip to main content
developingCyber

DHS Data Breach: 41,000 Employee Records Leaked by Hacktivists via DDoSecrets

A hacktivist group, 'The Department of Peace,' has obtained and leaked personal and operational data of over 41,000 Department of Homeland Security (DHS) employees, including ICE officials and undercover agents, via DDoSecrets.

AI disclosure: Model-written assessment of the linked reports, not a verified fact. Check the sources. How Mosaic works

Unknown0 of 8 key facts linked
Not measuredno reporting-volume measure is served for situations
Not assessedno severity is rated for situations
10 publishers11 reports

: Escalating (the model's assessment, not a measurement)

Oct 29First seen Oct 28Assessment written Oct 29
Why now
Newest report Oct 29: 41,000 DHS employee records leaked after Okta SSO breach (SecurityWeek).from the newest member report, published 29 Oct 12:54 UTC
Why it matters
This breach compromises the operational security of US federal agencies, endangers personnel, and indicates persistent vulnerabilities in government cybersecurity infrastructure.
Affected
United States (lead)countries named in the evidence; the lead is the country it is filed under, not an event location
Next catalyst
No scheduled catalyst known.Mosaic holds a schedule only for economic-calendar releases; 4 indicators to watch below
Watch in Monitor Export brief

Save keeps it in Monitor › Saved, without alerts. Watch opens Monitor with “DHS Data Breach” as the subject.

Known and unknown

key facts by their own evidence status

Known

None of the key facts is established by the evidence yet.

Not established

  • Data of over 41,000 DHS employees, including ICE, CBP, and CISA staff, has been leaked.
  • The data was published via Distributed Denial of Secrets (DDoSecrets) by 'The Department of Peace' group.
  • Leaked information includes names, departments, contact details, job descriptions, and roles in surveillance/special operations.
  • The leaked data includes details of undercover ICE agents and personnel with classified identities.
  • The breach exposed affiliations with wiretap programs and tech vendors.
  • The breach may have originated from an Okta single sign-on (SSO) system compromise earlier this year.
  • The full scope and authenticity of all leaked data elements remain partially unverified.
  • The precise attack vector and perpetrator, beyond the hacktivist claim, are not fully confirmed.

stated, not yet supported by linked evidence

Indicators to watch

  • →Official DHS confirmation or denial of the breach and its scope
  • →Identification of specific individuals or operations compromised by the leak
  • →Further details on the method of the breach, particularly regarding the Okta SSO system
  • →Any reported incidents of harassment or targeting of exposed personnel

what would change the read; not a schedule

Evidence

Unknown · 11 reports · 10 distinct outlets

Central claim DHS Breach: Activists Leak Data of 41,000 Employees, Including ICE Officials

11 reports, newest first. Each time is when the report was published, or when Mosaic recorded it if no publication time was given; event times are not recorded. Several outlets can carry one story, so a number of reports is not independent confirmation.

  1. published
  2. published
  3. published
  4. published
    Hackers breach ICE systems, exfiltrate data of thousands of officersFAZ · Reported · Context · does not support the central claim
  5. published
  6. published
  7. published
  8. published
  9. published
  10. published
  11. published

Connected

named in this situation's reports; not a claim that one causes another

Other situations in United States

Loading…

Actors

Loading…

Places

Anomalies

Loading…

Assessment

model confidence: under Technical details
Read the full assessment

A hacktivist group, 'The Department of Peace,' has obtained and leaked personal and operational data of over 41,000 Department of Homeland Security (DHS) employees, including ICE officials and undercover agents, via DDoSecrets. The leak, confirmed by multiple sources, exposes names, contact details, job descriptions, and affiliations with sensitive programs, raising significant security and intelligence concerns. The full scope of the data and the precise method of the breach, though potentially linked to an Okta SSO compromise, remain partially unverified.

AI disclosure: Model-written assessment of the linked reports, not a verified fact. Check the sources. How Mosaic works

Topics dhs · ice · data breach · hacktivism · cybersecurity · personnel data · ddosecrets · government · leak · surveillance · federal agencies · personal data

Technical details
Impact score
5.7 / 10 · a priority score, not confidence
Model confidence
Low: evidence unknown (the evidence conflicts; a key fact is not linked to evidence); 10 distinct outlets
Coverage focus
91% in primary evidence group
Coherence
0.89
Review state
published
Refreshed
Updated Oct 29, synthesized Oct 29. Not evidence time.
Cluster type
story
Member signals
11
Situation id
45e3d784-4d03-42f2-b4c6-7d11f2db1cbd
Last evidenceOct 29, 13:04 UTC
Last successful evaluationSuccessful evaluation timestamp unavailable (legacy)
Last attempt·

Discussion

…

Sign in to add a note, contribute a source, or challenge the assessment.