More than 41,000 employees and contractors of the U.S. Department of Homeland Security (DHS) were identified in a data leak published online this week, raising concerns about privacy, security, and the potential impact on ongoing law enforcement operations. The breach, disclosed on Wednesday, involves detailed information including names, offices, mobile phone numbers, work emails, and assignments of personnel across various DHS components, such as Immigration and Customs Enforcement (ICE), Customs and Border Protection (CBP), and U.S. Citizenship and Immigration Services.
The data was initially obtained by a hacktivist group calling itself the Department of Peace, which claimed responsibility for gaining access through the agency’s single sign-on system. The group shared the records with the nonprofit organization Distributed Denial of Secrets (DDoS), which created a searchable online database. The authenticity of the information was verified by current and former DHS officials. The Department of Homeland Security acknowledged the breach and stated it was actively assessing the situation and working to protect its employees.
The publication of the data has drawn attention due to its potential implications for the safety of DHS personnel, many of whom are involved in immigration enforcement—a key priority of the Trump administration’s policy agenda. Some employees expressed fear of targeting and harassment, given that their association with immigration operations is now publicly accessible. Several ICE and CBP officers contacted using the released information said they had not been formally notified about the breach.
Advocates for transparency defended the release as a means to hold the department accountable, emphasizing that the disclosed list identifies key figures responsible for immigration enforcement, covert operations, and counter-leak initiatives. The hacktivist group suggested that exposing these officials would increase oversight of DHS activities, including enforcement tactics and rendition programs.
Conversely, former DHS officials and security experts warned that the leak poses significant risks. John Sandweg, the acting ICE director during the Obama administration, described the exposure of agents’ names and assignments as a “nightmare scenario” that could endanger personnel and compromise investigations targeting gangs, drug cartels, and other criminal networks. DHS agents have previously faced threats of violence, which led to the agency adopting practices such as wearing masks and plainclothes to conceal their identities.
The breach follows closely on the heels of other major unauthorized disclosures of U.S. government personnel data, including hacks affecting the FBI and the Pentagon. However, unlike those incidents, which involved data that remained largely confined within hacker groups, the DHS employee information has been made publicly searchable, raising concerns about the ease with which malicious actors or individuals with harmful intent can access it.
DHS noted that it takes “all security threats against our employees and officers seriously” and pledged to provide updates as investigations progress. Meanwhile, cybersecurity experts have described the hack as ideologically motivated, distinguishing it from purely criminal or espionage-driven breaches.
This leak affects roughly 15 percent of the DHS workforce, which numbers more than 260,000 employees and contractors, and highlights ongoing challenges in protecting sensitive personnel data within federal agencies that manage critical national security and law enforcement functions.
