Data on 41,000 DHS Employees Published After Hacktivists Claim Identity-Service Breach
Summary
A leak site published internal data on more than 41,000 DHS employees and contractors after the Department of Peace claimed it obtained a database through DHS’s Okta SSO. CyberScoop verified current CISA employees were listed; Okta said it had no evidence of compromise.
Key points
- A leak site published data on more than 41,000 DHS employees and contractors.
- The Department of Peace claimed it obtained the database from an Okta single sign-on service used by DHS; the article does not independently confirm the claimed breach.
- CyberScoop verified that numerous current CISA employees and former agency leaders were listed in the data.
- DDoSecrets and hacker and journalist maia arson crimew received the data from the Department of Peace; crimew created a search tool for it.
- Okta said it was aware of the report and had no evidence its data or systems were compromised. DHS had not responded to a request for comment.
Article Details
- Victim Organization
- Department of Homeland Security
- Incident Type
- Claimed breach of an identity service followed by publication of internal employee and contractor data
- Data Types Exposed
- Internal employee and contractor data
- Organizational and personnel information
- Affected Records
- Data concerning more than 41,000 DHS employees and contractors; the article does not establish that this is an exact record count.
- Operational Impact
- A leak website published the dataset. No disruption to DHS systems or operations was reported.
- Ransom Or Extortion
- Unknown
- Claim Status
- claimed
People
Emma BestFounder of Distributed Denial of Secrets; commented on the significance and contents of the leak.maia arson crimewReceived the data from the Department of Peace and created a search tool for the DHS dataset.Ryan ShapiroExecutive director of Property of the People; commented on the dataset's potential utility for FOIA research.