Unauthorized actors obtained and published online personal data belonging to more than 40,000 U.S. Department of Homeland Security employees, including personnel at Immigration and Customs Enforcement and Customs and Border Protection. The disclosure has no reported date, but the scale places it among the larger known exposures involving staff at the federal department.
The leak included personally identifiable information, as first reported by Engadget. Reports differ slightly on the total: one account put the number above 41,000 people, while another reported more than 40,000 affected workers.
The exposure reaches two high-profile DHS agencies
ICE and CBP both operate within DHS, although they carry out distinct roles. ICE enforces immigration and customs laws inside the United States, while CBP handles border operations and customs enforcement at ports of entry and across the border.
Publishing identifying information tied to employees in those agencies creates privacy and personal safety concerns. It can make individual personnel easier to identify or contact, and it places added pressure on DHS to protect worker information at agencies that already face intense public scrutiny over immigration enforcement and border policy.
The incident also highlights the stakes of personnel-data security across federal institutions. A database containing staff records can affect thousands of people at once, even when the attackers do not gain access to operational systems. For employees whose jobs involve law enforcement or border duties, the consequences can extend beyond a standard account or identity-theft risk.
Key details remain unresolved
The identity of the party behind the release has not been established. Reporting has described the perpetrator differently, with one account referring to a hacktivist group and another to a single hacker. DHS has not publicly established the precise number or types of records exposed, when the intrusion and online publication occurred, or whether the systems involved have since been secured.
This article was produced with AI assistance from multi-source reporting and is published under our editorial standards.
