Overview
- The Icepick dataset was posted to Distributed Denial of Secrets after a hacker collective called the Department of Peace provided the files to Swiss researcher maia arson crimew, who built a searchable front end.
- The files include names, work contact details, job titles and office locations for more than 41,000 Department of Homeland Security employees and contractors across ICE, CBP, HSI, CISA and other components.
- Reporters who reviewed portions of the dataset found timestamps that suggest the records were exfiltrated in mid‑August, and on Wednesday multiple outlets corroborated parts of the data.
- The leak contains Active Directory user‑group membership data that links individuals to investigative and surveillance programs such as Penlink, Mobile Fortify, Palantir and Cellebrite, creating operational‑security and safety concerns for staff.
- Leak hosts and transparency advocates argue the material will aid FOIA requests, journalism and congressional oversight, while DHS says it is investigating, Okta says it has no evidence its systems were compromised, and lawmakers and agencies are weighing next steps.