A hacking group has claimed responsibility for a breach of US Department of Homeland Security personnel files that exposed the names, phone numbers and addresses of more than 40,000 agents, operatives and associates, including people involved in undercover work.
The group, calling itself the Department of Peace, said it obtained the information by compromising DHS’s single sign-on system. It then shared the material with Distributed Denial of Secrets, which published it in a database named Icepick.
The database was made searchable by US journalist Ryan Ottignon and the Swiss hacker known as maia arson crimew. Mr Ottignon said Ms crimew carried out the technical work on the project.
More than 21,000 records concern employees of US Customs and Border Protection, while a further 10,000 relate to Immigration and Customs Enforcement and its Homeland Security Investigations unit.
DHS personnel files hack exposes links to undercover operations
Emma Best, co-founder of Distributed Denial of Secrets, described the leak as “extraordinary but deceptive in its simplicity”. She said it made explicit links between officials overseeing covert and undercover operations and personnel involved in the Department of Homeland Security’s rendition and deportation programmes.
Activists said the information could assist investigations into DHS and help people submitting freedom of information requests, which can be ineffective when applicants lack details such as officials’ names or email addresses.
DHS said it was “aware of a potential breach and is actively working to address the situation swiftly and effectively”. The department added that it was taking necessary steps to “ensure all are properly protected”.
The leaked database is not comprehensive and accounts for about a fifth of Homeland Security’s workforce, which numbers slightly more than 220,000 people. The breach follows similar hacking attacks affecting the FBI.
Mr Ottignon rejected suggestions that those involved in the project were doxing government employees. He argued that officials involved in immigration enforcement often conceal their identities while carrying out operations in communities.
“We are in a situation in which a group of public officials go around into cities and states and all around the country, and they seek to hide who they are. Very frequently using masks, wearing plain clothes. And they do universally unspeakable things to these communities,” he said.
“We need oversight for useful government, if it exists at all. So this is just one step in that oversight process,” he added.
In a note accompanying the files, Distributed Denial of Secrets said: “They have our information, so it’s only fair that we have theirs.”
