Article

【Hacker claims to have leaked data on more than 40000 employees through Okta at the U.S. Department of Homeland Security; DDoSecrets has published it】

A hacker claiming to be from the Department of Peace said they obtained extensive employee data from the Okta single sign-on system used by the U.S. Department of Homeland Security (DHS) and that the data was publicly released on Wednesday as the Icepick dataset by the data-transparency organization Distributed Denial of Secrets (DDoSecrets). The leak contains more than 40000 records, representing approximately DHS roughly 220000 one-fifth of the workforce, and includes names, job titles, work email addresses, phone numbers, and office locations, along with information associated with access to internal systems; approximately 21000 records concern personnel from Customs and Border Protection (CBP approximately 10000 records concern Immigration and Customs Enforcement (ICE) and its Homeland Security Investigations (HSI), while records related to the Cybersecurity and Infrastructure Security Agency (CISA) number nearly 1000 records. TechCrunch said it verified the authenticity of some of the data, and timestamps indicate that the data was exported around mid-August; the hacker also provided the data to journalist and hacker maia arson crimew, who then handed it over to DDoSecrets. Okta said its own systems and data had not been compromised; a Department of Homeland Security spokesperson had not responded to a request for comment at press time. The report said this was the third U.S. government data breach to attract attention in the past 1 months; personnel files of Federal Bureau of Investigation employees and Pentagon personnel data had also previously been stolen.