cyber.hendryadrian.com
Cyber Attack & Data Breach · databreachtoday.com

Hacktivist Group Claims Leak of Data on 41,000 DHS Employees

· Original article ↗

Summary

The Department of Peace says it obtained 165 MB of DHS data identifying more than 41,000 employees. After a searchable tool appeared online, DHS reportedly used ZeroFox to seek takedowns; the data includes contact details and locations.

Key points

  • The Department of Peace claims it obtained 165 MB of DHS data containing names and contact details for more than 41,000 employees.
  • A searchable Icepick tool was hosted at icepi[.]cx, then reappeared at icepicx[.]is after becoming unavailable at its original domain.
  • DDoSecrets said it released the site's source code as a ZIP archive and shared it via the BitTorrent network.
  • A cybersecurity firm reportedly acting for DHS sent takedown notices to registrars and social media platforms and sought to block links.
  • ZeroFox warned that the exposed cell phone numbers and office locations could create harassment and physical-safety risks.
  • The group’s claim and the article’s reporting describe the leak; the supplied content does not establish independent confirmation of how the data was obtained.

Article Details

Victim Organization
Department of Homeland Security
Incident Type
Unauthorized disclosure and publication of DHS employee data
Data Types Exposed
  • Names
  • Contact details
  • Cell phone numbers
  • Office locations
  • Identities of undercover operatives
Affected Records
Over 41,000 DHS employees, according to the Department of Peace
Affected Data Size
165 megabytes, according to the Department of Peace
Operational Impact
The data was made available through a searchable online tool. The original domain became inaccessible, and the tool reappeared at a new domain. ZeroFox assessed that harassment and physical-safety risks to named personnel were very likely; some Bluesky users reported that links to the data were blocked.
Ransom Or Extortion
None reported
Claim Status
claimed

Indicators of compromise

TypeIndicatorContext
DOMAINicepi[.]cxDomain hosting the searchable tool for the leaked DHS employee data, according to the article.
DOMAINicepicx[.]isReplacement domain where the searchable tool for the leaked DHS employee data reappeared after the original domain became inaccessible.

People

Emma BestDDoSecrets cofounder who commented on the significance of the leaked DHS data.maia arson crimewDesigned the online search tool for the leaked Icepick data and announced that it had reappeared at a new domain.

Threat Actors

Department of PeaceSelf-described hacktivist group that said it obtained 165 megabytes of DHS data and shared it with DDoSecrets and maia arson crimew.

Vendors

ZeroFoxtool became no longer accessible at its original domain - although it soon reappeared on icepicx.is. "zerofox and dhs can't keep us down forever, the search tool is now back up at a new domain," wrote maia arson

Products

Blueskythe search tool is now back up at a new domain," wrote maia arson crimew on social media network Bluesky.

Countries

United StatesThe U.S. government is attempting to remove from the internet a trove of data that identifies tens of thousands of Department of Homeland Security employees, including undercover operatives.

Industries

GovernmentThe U.S. government is attempting to remove from the internet a trove of data that identifies tens of thousands of Department of Homeland Security employees, including undercover operatives.

Related Articles