Data Breach Exposes Personal Information of Over 41,000 DHS Employees
A significant cyberattack has compromised the personal information of more than 41,000 employees within the U.S. Department of Homeland Security (DHS). The breach includes sensitive details such as names, job titles, phone numbers, email addresses, and office locations for personnel across several agencies, including Customs and Border Protection (CBP), Immigration and Customs Enforcement (ICE), CISA, USCIS, and HSI. The hacker, operating under the moniker "Department of Peace," reportedly gained access through Okta, an identity and access management service utilized by the DHS. Beyond personal employee data, the leak—now hosted by the nonprofit Distributed Denial of Secrets (DDoSecrets)—contains information linking specific agencies to surveillance tools like Mobile Fortify and PenLink. This incident follows a recent data theft involving FBI employee records and highlights ongoing vulnerabilities in federal identity management systems. The breach poses significant security risks to law enforcement personnel whose identities are often protected for operational safety.
Tickers: $OKTA
Topics: cyberattack data breach government security identity theft
Read the full article at The Verge
Part of the story Bluesky Restricts Links to Leaked DHS Employee Database (6 articles)