The Department of Homeland Security confirmed on October 28, 2026, that it is actively taking steps to protect personnel and resolve an incident after contact details for more than 40,000 federal workers were published online.
"DHS is aware of a potential breach and is actively working to address the situation swiftly and effectively," a department spokesperson said. "We take all security threats against our employees and officers seriously and will work to ensure all are properly protected."
The compromised records represent approximately one-fifth of the agency's 220,000-person workforce. Exposed files include names, job titles, office addresses, email addresses, and mobile phone numbers for personnel across multiple branches, including officers engaged in covert operations. More than 21,000 of the listings involve Customs and Border Protection staff, approximately 10,000 belong to Immigration and Customs Enforcement and Homeland Security Investigations, and nearly 1,000 records cover Cybersecurity and Infrastructure Security Agency employees.
An intruder calling themselves Department of Peace claimed they pulled the files from an internal Okta single sign-on system used to manage access permissions. Okta denied any internal breach. "Okta is secure, and we have no evidence our data or systems were compromised," an Okta spokesperson said.
Internal group membership entries included in the leak show staff access to technical platforms such as Penlink location tracking and the Mobile Fortify facial recognition tool.
