Massive data breach exposes 40,000 US Homeland Security employees
By
asserted
breach → expose → employees
The leak website Distributed Denial of Secrets said on Wednesday it has released data on more than 40,000 Department of Homeland Security employees, including details about officials working in sensitive fields such as surveillance and human intelligence.
asserted
it → say → surveillance
DHS said in a statement it was “aware of a potential breach and is actively working to address the situation swiftly and effectively.”
asserted
it → say → situation
The agency said it was working to ensure its employees were properly protected and would update the public “when more information is available.”
asserted
information → say → public
The disclosure — which the nonprofit data transparency group says draws on information obtained by an entity calling itself “Department of Peace” — is the third major government data leak to have made headlines in the past month.
asserted
group → say → month
In September, the hacking group ShinyHunters claimed the theft of a massive trove of data from the Federal Bureau of Investigation, including sensitive job details and medical information from thousands of bureau employees.
asserted
group → claim → employees
Last week, the Defense Department was hit with a class action lawsuit following a breach that exposed data on millions of current and former military personnel.
asserted
that → hit → personnel
The DHS data includes names, phone numbers and email addresses of employees from Immigration and Customs Enforcement, Customs and Border Protection, Homeland Security Investigations, the Cybersecurity and Infrastructure Security Agency, and other DHS component agencies.
asserted
data → include → Enforcement
Also included in the data were job titles and email groups, which, among other details, showed which agents were assigned to special operations, surveillance jobs, computer forensics and undercover work.
asserted
agents → include → operations
In a statement, Distributed Denial of Secrets co-founder Emma Best said the hacktivist and journalist known as “maia arson crimew” developed a search tool for the data that would allow the public to browse it.
asserted
public → say → it
Best said the tool would “replace anonymity with accountability” and empower journalists, guide public records requests and boost congressional oversight.
asserted
tool → say → oversight
Crimew said her tool would provide “FOIA material for years to come!”
asserted
tool → say → years
The Department of Peace did not immediately respond to a request for comment, but in a statement included with the data it said that DHS employees “have our information, so it’s only fair that we have theirs” and that it hoped the data “can be used to limit further harm by the DHS and supports all efforts in that direction.”
asserted
data → respond → direction
Start your day with all you need to know
Morning Report delivers the latest news, videos, photos and more.
asserted
Report → start → news
The Department of Peace in March claimed responsibility for hacking DHS and posting documents related to contracts with outside vendors.
asserted
Department → claim → vendors
Best’s statement said the Department of Peace harvested the data from the Okta sign-on service used by DHS.
asserted
Department → say → DHS
Reuters could not immediately corroborate the claim.
uncertain
Reuters → corroborate → claim
Okta said in response to a Reuters query: “Okta is secure, and we have no evidence our data or systems were compromised.”
asserted
data → say → evidence
Reuters could not immediately verify the authenticity of the entire data trove but it was able to match personal information about six DHS employees named in the leak to credit bureau records and breach data carried by the dark web intelligence platform District 4 Labs.
uncertain
it → verify → platform
Reuters called three DHS employees directly and was able to confirm their phone numbers and other details.
asserted
Reuters → call → numbers
One said it was the first they had heard of a breach.
asserted
they → say → breach
In several cases, the data tracked information available on DHS employees’ LinkedIn profiles.
asserted
data → track → profiles
But in others, the data revealed nonpublic data about internal DHS organization charts or previously undisclosed programs or operations.
asserted
data → reveal → charts
The Aporia
