Breaches · 3h ago
DDoSecrets published records on more than 41,000 Department of Homeland Security employees and contractors after hacktivists from the Department of Peace said they obtained them through an identity service DHS uses. The group identified the service as Okta single sign-on, but Okta said it has no evidence its systems or data were compromised.
DDoSecrets founder Emma Best said the records link personnel to work overseeing covert operations, leak investigations and deportation programs. That connection makes a directory more useful for targeting or tailoring requests: names and contact details can point to who handles sensitive work. CyberScoop verified current CISA employees among those listed.
If DHS personnel in sensitive roles are included, those published links can remain useful for targeting or mapping the agency even if credentials are changed. The reporting does not establish that credentials or Okta systems were compromised.
2 sources covering this story
Leak site publishes data on more than 41,000 DHS employees obtained by hacktivists
DDoSecrets has published internal records on over 41,000 DHS employees and contractors following an alleged identity service breach by hacktivists.
A hacker obtained personally identifiable information about more than 40,000 Homeland Security staffers, which has since been published online.
Part of the PlainSec briefing for 2026-10-28