Photo via NPR

Hackers expose the identities of more than 40,000 DHS employees

Read the original at NPR ↗
Cite

Romo, V. (2026, October 29). Hackers expose the identities of more than 40,000 DHS employees. NPR. https://www.npr.org/2026/10/28/nx-s1-6021497/dhs-hack-ice

Dated from the outlet's own feed. Check the original for its byline.

NPR · collected 2026-10-29 · by Vanessa Romo

Quick Summary

Hackers known as the Department of Peace breached the U.S. Department of Homeland Security’s personnel files on July 17th, exposing personal information including names, phone numbers, and addresses for over 40,000 employees. The hackers accessed this data through subverting DHS's single sign-on system and distributed it to Distributed Denial of Secrets (DDoSecrets) and journalist Ryan Ottignon. The leaked database includes details on more than 21,000 U.S. Customs and Border Protection staff and over 10,000 Immigration and Customs Enforcement employees. Ottignon defended the leak as a form of oversight for government actions he deems unacceptable in a free society.
Written by AI on 2026-10-29, from this article's own text only (the story summary below draws on all the coverage).

AI analysis

Story summary

On October 28, 2026, the leak website Distributed Denial of Secrets released data on more than 41,000 personnel from the US Department of Homeland Security (DHS), including thousands involved in immigration enforcement like ICE and CBP. The leaked information includes names, work addresses, phone numbers, and email addresses of DHS staff. The hacktivist group "The Department of Peace" claimed responsibility, arguing that since government employees have their data, it is fair to share theirs. DHS has started an investigation into the breach, while some hackers are developing search tools for public use. The Icelandic hosting company FlokiNET received a request from DHS to take down or limit access to this information due to security risks, but decided against it.

Written for “DHS Data Breach Exposes Employees” on 2026-11-02, grounded in this article and the 11 other(s) covering the same event.

Story

📰 DHS Data Breach Exposes Employees
Politics · 12 article(s) covering the same event. Compare every outlet's account →

Compared with similar articles

This article reads unscored and hedges 5% of its claims. Each row says how that neighbour differs.
BBC News
Hedges 4 of 29 claims Outlet record 68/100
The Independent
Hedges 2 of 25 claims Outlet record 59/100
The Straits Times
Hedges 2 of 20 claims Outlet record 66/100
New York Post
Hedges 2 of 23 claims Outlet record 66/100
The Guardian
⚖️ Centre Hedges 1 of 10 claims Outlet record 66/100
The Guardian
Hedges 2 of 18 claims Outlet record 66/100
CBC News
Hedges 2 of 20 claims Outlet record 60/100
NBC News
⚖️ Leans left Hedges 2 of 51 claims Outlet record 60/100
CBS News
Hedges 0 of 3 claims Outlet record 66/100
How this article was measured signals, leaning charts, publisher record, byline, topics and claims

Signals How these are calculated →

Claims extracted
21
sentences that state something as happening or true
Uncertain
5%
1 of 21 hedged ("reportedly", "may", "according to")
Leaning
withheld
no quote in the article backed the model's score
Publisher signals
60/100
NPR's corrections and hedging, across everything collected from it. Not a measure of accuracy.
Outlets on this story
12
Politics
Same framing elsewhere
1
articles that frame the event the way this one does
Analyzed 2026-10-29 · how these are computed

How this is being covered How these are calculated →

Article leaning vs. publisher reliability
Source leaning vs. consistency

Publisher

NPR · 1007 article(s) · 3 correction(s) detected
Running correction rate · 3 correction(s)

Who wrote this

Vanessa Romo
3 article(s) here · 1 carrying a prediction
🔮 DDoSecrets cofounder Emma Best called the leak "extraordinary but deceptive in its simplicity," because it makes explicit connections between "officials responsible for overseeing covert and undercover operations …along with key personnel in DHS's ever-escalating rendition and deportation programs." Other activists say the information will be a boon to those investigating DHS and filing freedom of information requests, which, due to a lack of specific information, like names, email addresses, can often yield useless results.
🔮 But it also hasn't said whether it will extend the protection in the future.
🔮 "I could feel it coming and I didn't want to hurt myself so I jammed my arm between the metal bed frame and the wall to lock myself in place," D.E., a Mexican national who requested NPR only use his initials because he fears government retaliation, said in Spanish.
Also by Vanessa Romo
Nothing else under this byline is closely related to this article, so these are simply their most recent.

Topics

DHS Distributed Denial of Secrets ICE the Department of Peace the U.S. Department of Homeland Security

Subjects

DHS ORG · 6× Ottignon ORG · 3× the Department of Peace ORG · 3× DDoSecrets ORG · 2× Distributed Denial of Secrets ORG · 1× ICE ORG · 1× Markwayne Mullin PERSON · 1× Ryan Ottignon PERSON · 1× U.S.-based GPE · 1× the U.S. Department of Homeland Security ORG · 1×

Narrative

DDoSecrets cofounder Emma Best called the leak "extraordinary but deceptive in its simplicity," because it makes explicit connections between "officials responsible for overseeing covert and undercover operations …along with key personnel in DHS's ever-escalating rendition and deportation programs." Other activists say the information will be a boon to those investigating DHS and filing freedom of information requests, which, due to a lack of specific information, like names, email addresses, can often yield useless results.
framing: assertive · carried by 1 article(s) · first seen 2026-10-29
🔮 DDoSecrets cofounder Emma Best called the leak "extraordinary but deceptive in its simplicity," because it makes explicit connections between "officials responsible for overseeing covert and undercover operations …along with key personnel in DHS's ever-escalating rendition and deportation programs." Other activists say the information will be a boon to those investigating DHS and filing freedom of information requests, which, due to a lack of specific information, like names, email addresses, can often yield useless results.

Claims (21 extracted, 1 hedged)

Hackers expose the identities of more than 40,000 DHS employees A hacking group cracked the U.S. Department of Homeland Security's personnel files, exposing the names, phone numbers and addresses of more than 40,000 DHS agents, operatives, and associates, on Wednesday, including those involved in undercover operations. asserted
group → expose → operations
"On July 17th, Markwayne Mullin said he was 'turning up the heat.' asserted
he → say → heat
This is what happens to ICE when you do that," a spokesperson for the hacktivist group behind the breach, the Department of Peace, said in an online statement. asserted
spokesperson → happen → statement
The hackers said they stole the data by subverting DHS's single sign on system, according to an online post. uncertain
they → say → post
It said it distributed that material to the group Distributed Denial of Secrets, which posted it online in a database called Icepick. asserted
which → say → database
The Department of Peace also shared the trove of data with Ryan Ottignon, a U.S.-based journalist, and a Swiss hacker known as maia arson crimew. asserted
Department → share → crimew
Together, the two created a searchable online database, with crimew doing all of the technical work, Ottignon told NPR. asserted
Ottignon → create → NPR
DDoSecrets cofounder Emma Best called the leak "extraordinary but deceptive in its simplicity," because it makes explicit connections between "officials responsible for overseeing covert and undercover operations …along with key personnel in DHS's ever-escalating rendition and deportation programs." Other activists say the information will be a boon to those investigating DHS and filing freedom of information requests, which, due to a lack of specific information, like names, email addresses, can often yield useless results. asserted
which → call → results
In a statement, DHS said it was "aware of a potential breach and is actively working to address the situation swiftly and effectively." asserted
it → say → situation
The department added that it is taking necessary steps to "ensure all are properly protected." asserted
all → add → steps
More than 21,000 records identify employees with U.S. Customs and Border Protection. asserted
records → identify → Protection
Another 10,000 relate to Immigration and Customs Enforcement employees and its Homeland Security Investigations unit. asserted
10,000 → relate → employees
It is an unprecedented breach of intelligence, coming on the heels of similar hacking attacks at the FBI. asserted
It → come → FBI
However, the database is far from comprehensive and represents about a fifth of Homeland Security's workforce, which staffs a little more than 220,000 people. asserted
which → represent → people
Ottignon, who has worked on similar data leak projects in the past, rejected suggestions that he and others connected to the Department of Peace or Distribution Denials of Secrets were doxing government employees. asserted
he → work → employees
"We are in a situation in which a group of public officials go around into cities and states and all around the country, and they seek to hide who they are. asserted
they → go → country
And they do universally unspeakable things to these communities," Ottignon said. asserted
Ottignon → do → communities
He added that he believed that kind of behavior is unacceptable in a free society. asserted
kind → add → society
"We need oversight for useful government, if it exists at all. asserted
it → need → government
So this is just one step in that oversight process," he added. asserted
he → add → process
In a note attached to the files, DDoSecrets wrote, "They have our information, so it's only fair that we have theirs." asserted
we → attach → theirs
💬Give feedback
🕘History 🎫Support