The leak website Distributed Denial of Secrets has published sensitive information on more than 40,000 employees of the US Department of Homeland Security (DHS). This includes crucial details related to surveillance and human intelligence.
DHS Response to the Breach
In response to the breach, DHS acknowledged the situation and stated that it is actively working to safeguard its employees' information. The agency plans to provide updates as more information becomes available.
We are aware of a potential breach and are actively working to address the situation swiftly and effectively.
DHS Statement
The leak, attributed to a group named the Department of Peace, is the latest in a series of high-profile data breaches involving government agencies. Recent incidents include a significant data theft from the FBI and a class action lawsuit against the Defense Department.
- Names, phone numbers, and email addresses of DHS employees were exposed.
- Job titles and details about assignments in sensitive operations were included.
The published data features a search tool allowing public access to the information. Emma Best, co-founder of Distributed Denial of Secrets, stated that the tool aims to enhance transparency and accountability in government actions.
According to Best, the hacktivist known as “maia arson crimew” developed the search tool. Best emphasized that this tool could facilitate public records requests and increase congressional oversight.
The Department of Peace claimed responsibility for the hack, asserting that it was necessary to hold DHS accountable. They indicated that the information obtained would be used to limit further harm by the agency.
Despite the claims of a breach in the Okta sign-on service used by DHS, Okta has denied any evidence of a compromise in its systems.
While the authenticity of the leaked data remains partially unverified, some personal information has been corroborated against recognized databases, raising alarm about the extent of the breach.