Hackers expose the identities of more than 40,000 DHS employees

Read the original at NPR ↗
Cite

Romo, V. (2026, October 29). Hackers expose the identities of more than 40,000 DHS employees. NPR. https://www.npr.org/2026/10/28/nx-s1-6021497/dhs-hack-ice

Dated from the outlet's own feed. Check the original for its byline.

NPR · collected 2026-10-29 · by Vanessa Romo

Quick Summary

Hackers known as the Department of Peace breached the U.S. Department of Homeland Security’s personnel files on July 17th, exposing personal information including names, phone numbers, and addresses for over 40,000 employees. The hackers accessed this data through subverting DHS's single sign-on system and distributed it to Distributed Denial of Secrets (DDoSecrets) and journalist Ryan Ottignon. The leaked database includes details on more than 21,000 U.S. Customs and Border Protection staff and over 10,000 Immigration and Customs Enforcement employees. Ottignon defended the leak as a form of oversight for government actions he deems unacceptable in a free society.
Written by AI on 2026-10-29, from this article's own text only (the story summary below draws on all the coverage).

AI analysis

Story summary

Distributed Denial of Secrets, a non-profit leak website, released data on more than 40,000 Department of Homeland Security (DHS) employees, including phone numbers, email addresses, job titles, and descriptions of their roles. The hackers, calling themselves the "Department of Peace," obtained this information by breaching DHS's single sign-on system and handed it over to Distributed Denial of Secrets for publication on October 28, 2026. Among those affected are ICE (Immigration and Customs Enforcement) and CBP (Customs and Border Protection) agents, with approximately 10,000 ICE personnel and over 20,000 CBP employees' information exposed.

DHS confirmed the breach but did not disclose further details. The hack is part of a series of recent government data leaks, including one by ShinyHunters against the FBI in September and another involving millions of military personnel records. Activists argue that this leak will facilitate public oversight and freedom of information requests into DHS activities due to the specificity of the leaked data.

Written for “DHS Data Breach Exposes Employee Information” on 2026-10-29, grounded in this article and the 4 other(s) covering the same event.
Why this leaning score
The model judged this article politically coded and scored it -0.65, but 1 quote(s) could not be found in the article and the other 2 are attributed speech rather than the article's own narration, so the score is not published.
Written under an earlier scoring contract, which gave a paragraph rather than checkable quotes. Re-analysing this article replaces it.
Leaning score withheld for article 113753: no verified evidence · logged 2026-10-29

Story

📰 DHS Data Breach Exposes Employee Information
Politics · 5 article(s) covering the same event. Compare every outlet's account →

Compared with similar articles

This article reads unscored and hedges 5% of its claims. Each row says how that neighbour differs.
BBC News
Hedges 4 of 29 claims Outlet record 69/100
The Guardian
Hedges 2 of 18 claims Outlet record 67/100
CBC News
Hedges 2 of 20 claims Outlet record 60/100
How this article was measured signals, leaning charts, publisher record, byline, topics and claims

Signals How these are calculated →

Claims extracted
21
sentences that state something as happening or true
Uncertain
5%
1 of 21 hedged ("reportedly", "may", "according to")
Leaning
withheld
no quote in the article backed the model's score
Publisher signals
60/100
NPR's corrections and hedging, across everything collected from it. Not a measure of accuracy.
Outlets on this story
5
Politics
Same framing elsewhere
1
articles that frame the event the way this one does
Analyzed 2026-10-29 · how these are computed

How this is being covered How these are calculated →

Article leaning vs. publisher reliability
Source leaning vs. consistency

Publisher

NPR · 932 article(s) · 3 correction(s) detected
Running correction rate · 3 correction(s)

Who wrote this

Vanessa Romo
3 article(s) here · 1 carrying a prediction
🔮 DDoSecrets cofounder Emma Best called the leak "extraordinary but deceptive in its simplicity," because it makes explicit connections between "officials responsible for overseeing covert and undercover operations …along with key personnel in DHS's ever-escalating rendition and deportation programs." Other activists say the information will be a boon to those investigating DHS and filing freedom of information requests, which, due to a lack of specific information, like names, email addresses, can often yield useless results.
🔮 But it also hasn't said whether it will extend the protection in the future.
🔮 "I could feel it coming and I didn't want to hurt myself so I jammed my arm between the metal bed frame and the wall to lock myself in place," D.E., a Mexican national who requested NPR only use his initials because he fears government retaliation, said in Spanish.
Also by Vanessa Romo
Nothing else under this byline is closely related to this article, so these are simply their most recent.

Topics

DHS Distributed Denial of Secrets ICE the Department of Peace the U.S. Department of Homeland Security

Subjects

DHS ORG · 6× Ottignon ORG · 3× the Department of Peace ORG · 3× DDoSecrets ORG · 2× Distributed Denial of Secrets ORG · 1× ICE ORG · 1× Markwayne Mullin PERSON · 1× Ryan Ottignon PERSON · 1× U.S.-based GPE · 1× the U.S. Department of Homeland Security ORG · 1×

Narrative

DDoSecrets cofounder Emma Best called the leak "extraordinary but deceptive in its simplicity," because it makes explicit connections between "officials responsible for overseeing covert and undercover operations …along with key personnel in DHS's ever-escalating rendition and deportation programs." Other activists say the information will be a boon to those investigating DHS and filing freedom of information requests, which, due to a lack of specific information, like names, email addresses, can often yield useless results.
framing: assertive · carried by 1 article(s) · first seen 2026-10-29
🔮 DDoSecrets cofounder Emma Best called the leak "extraordinary but deceptive in its simplicity," because it makes explicit connections between "officials responsible for overseeing covert and undercover operations …along with key personnel in DHS's ever-escalating rendition and deportation programs." Other activists say the information will be a boon to those investigating DHS and filing freedom of information requests, which, due to a lack of specific information, like names, email addresses, can often yield useless results.

Claims (21 extracted, 1 hedged)

Hackers expose the identities of more than 40,000 DHS employees A hacking group cracked the U.S. Department of Homeland Security's personnel files, exposing the names, phone numbers and addresses of more than 40,000 DHS agents, operatives, and associates, on Wednesday, including those involved in undercover operations. asserted
group → expose → operations
"On July 17th, Markwayne Mullin said he was 'turning up the heat.' asserted
he → say → heat
This is what happens to ICE when you do that," a spokesperson for the hacktivist group behind the breach, the Department of Peace, said in an online statement. asserted
spokesperson → happen → statement
The hackers said they stole the data by subverting DHS's single sign on system, according to an online post. uncertain
they → say → post
It said it distributed that material to the group Distributed Denial of Secrets, which posted it online in a database called Icepick. asserted
which → say → database
The Department of Peace also shared the trove of data with Ryan Ottignon, a U.S.-based journalist, and a Swiss hacker known as maia arson crimew. asserted
Department → share → crimew
Together, the two created a searchable online database, with crimew doing all of the technical work, Ottignon told NPR. asserted
Ottignon → create → NPR
DDoSecrets cofounder Emma Best called the leak "extraordinary but deceptive in its simplicity," because it makes explicit connections between "officials responsible for overseeing covert and undercover operations …along with key personnel in DHS's ever-escalating rendition and deportation programs." Other activists say the information will be a boon to those investigating DHS and filing freedom of information requests, which, due to a lack of specific information, like names, email addresses, can often yield useless results. asserted
which → call → results
In a statement, DHS said it was "aware of a potential breach and is actively working to address the situation swiftly and effectively." asserted
it → say → situation
The department added that it is taking necessary steps to "ensure all are properly protected." asserted
all → add → steps
More than 21,000 records identify employees with U.S. Customs and Border Protection. asserted
records → identify → Protection
Another 10,000 relate to Immigration and Customs Enforcement employees and its Homeland Security Investigations unit. asserted
10,000 → relate → employees
It is an unprecedented breach of intelligence, coming on the heels of similar hacking attacks at the FBI. asserted
It → come → FBI
However, the database is far from comprehensive and represents about a fifth of Homeland Security's workforce, which staffs a little more than 220,000 people. asserted
which → represent → people
Ottignon, who has worked on similar data leak projects in the past, rejected suggestions that he and others connected to the Department of Peace or Distribution Denials of Secrets were doxing government employees. asserted
he → work → employees
"We are in a situation in which a group of public officials go around into cities and states and all around the country, and they seek to hide who they are. asserted
they → go → country
And they do universally unspeakable things to these communities," Ottignon said. asserted
Ottignon → do → communities
He added that he believed that kind of behavior is unacceptable in a free society. asserted
kind → add → society
"We need oversight for useful government, if it exists at all. asserted
it → need → government
So this is just one step in that oversight process," he added. asserted
he → add → process
In a note attached to the files, DDoSecrets wrote, "They have our information, so it's only fair that we have theirs." asserted
we → attach → theirs
💬Give feedback
🕘History 🎫Support