Overview
- Hacktivists released a searchable archive called Icepick on Wednesday that indexes roughly 41,000 Department of Homeland Security employees and contractors.
- The files include names, work emails, phone numbers, office locations, and Active Directory user‑group records that show which internal systems and vendor tools employees can access.
- The group behind the release said the data came from an Okta single sign‑on service, but Okta says it has no evidence its systems were compromised and the intrusion method remains unconfirmed.
- DHS has acknowledged a potential breach, said it is investigating, and is working to protect staff while reporters and security researchers continue to verify records and assess risks.
- Advocates say the trove will aid FOIA requests and oversight, while security experts warn the access data could enable targeted intrusion or harassment and prompt legal and congressional probes.