Overview
- A dataset called Icepick was posted online by Distributed Denial of Secrets after hacktivists shared the material with DDoSecrets and journalist maia arson crimew, with the searchable site going live on Oct. 28–29 and parts later taken offline by registrars and platforms.
- The archive indexes roughly 41,191 DHS employees and contractors and includes names, work emails, phone numbers, office locations, job titles, internal group memberships and some descriptions of assignments.
- Hacktivists say the files came from an Okta single‑sign‑on service used by DHS but Okta has said it has found no evidence its systems were compromised, leaving the provenance disputed.
- DHS said it is aware of a potential breach, opened an investigation and filed takedown requests while security experts and former officials warn the data could enable impersonation, targeted phishing or expose undercover officers and ongoing investigations.
- Publishers and transparency advocates say the dataset will aid FOIA requests and oversight by identifying officials tied to covert and deportation operations, and the leak follows a string of 2026 incidents that exposed federal personnel records, raising broader questions about government data security.