Distributed Denial of Secrets, a transparency nonprofit, published records identifying more than 41,000 employees and contractors of the Department of Homeland Security on Wednesday. The data includes names, phone numbers, email addresses, job titles, email group memberships, and organizational details spanning Immigration and Customs Enforcement, Customs and Border Protection, Homeland Security Investigations, and the Cybersecurity and Infrastructure Security Agency. More than 21,000 of the exposed personnel work for CBP; roughly 6,600 work for ICE. The material goes beyond a simple personnel directory. It reveals which agents were assigned to special operations, surveillance programs, computer forensics units, and undercover work — the kind of operational detail that would normally be classified or at minimum tightly held. A hacktivist known as "maia arson crimew" built a public search tool for the data, designed to let journalists and oversight bodies browse it directly. The leak is attributed to an entity calling itself the "Department of Peace," which in March claimed responsibility for hacking DHS and posting documents related to vendor contracts. The group's statement included with the data said DHS employees "have our information, so it's only fair that we have theirs." The Department of Peace claims the data was harvested from the Okta single sign-on service used by DHS. Okta denied any compromise, stating it had "no evidence our data or systems were compromised." Reuters partially verified the data, matching personal information of about six DHS employees to credit bureau records and dark web intelligence via District 4 Labs. Three DHS employees reached by phone confirmed their numbers and other details; one said it was the first they had heard of any breach. The timing is pointed. DHS has aggressively moved to unmask critics on social media, obtain records on protesters and journalists, and defend its agents' rights to conceal their identities during enforcement operations. The leak inverts that asymmetry — exposing the watchers using the same logic the watchers use to justify watching everyone else. This is the third major government data breach to surface in a month. ShinyHunters claimed theft of FBI employee data including medical records in September. The Defense Department faces a class action lawsuit over a breach affecting millions of current and former military personnel. The pattern suggests systemic vulnerability in federal identity management infrastructure, not isolated incidents. Emma Best, co-founder of Distributed Denial of Secrets, framed the release as accountability infrastructure: replacing anonymity with transparency, empowering journalists, guiding public records requests, and boosting congressional oversight. Whether this produces oversight or endangers individuals — or both — depends entirely on what happens next with the data.
