Overview
- The archive, published Oct. 28 and labeled “Icepick,” contains records for about 41,191 Department of Homeland Security employees and contractors and was posted by Distributed Denial of Secrets after being shared by a hacktivist group calling itself the Department of Peace.
- Entries list names, work phone numbers, email addresses, job titles, office locations, more than 55,000 internal permission groups and references to undercover units and tools such as Palantir Falcon, PenLink, Cellebrite and a Title III intercept program.
- The hackers and DDoSecrets say the data came from an Okta single‑sign‑on service used by DHS, a claim Okta disputes with a statement that it has no evidence its systems were compromised.
- DHS has acknowledged a potential breach, told staff it is working to protect employees, filed takedown requests and used registrars and platform notices to limit the searchable site while investigators and security firms assess the scope.
- Security experts warn the records can enable impersonation, targeted harassment or compromise of investigations, while transparency advocates say the contact details will aid journalism, FOIA requests and congressional oversight, and the release follows other 2026 federal personnel exposures that raise questions about government data safeguards.