Hackers publish records of over 41,000 Homeland Security staff online

A hacktivist group has stolen and published the personal details of over 41,000 US Department of Homeland Security employees. Graham Cluley, Malwarebytes Labs, Hoodline, WIRED, CNBC, and WION all reported on the leak, while Security Affairs and IT Pro placed the total figure at more than 40,000 staff members. The Department of Homeland Security is aware of a potential breach, Malwarebytes Labs reported. [1][3][4][5][6][7][9][10][11]

The released records contain full names, job titles, work email addresses, phone numbers, office locations, and internal group memberships, according to Graham Cluley and Malwarebytes Labs. Graham Cluley reported that over half of the records belong to US Customs and Border Protection staff, while approximately 10,000 records belong to Immigration and Customs Enforcement personnel. [1][3]

A hacker group calling itself the Department of Peace claimed responsibility for the intrusion, Malwarebytes Labs reported. The group provided the stolen data to Swiss hacktivist maia arson crimew, who published it alongside the transparency collective DDoSecrets. Malwarebytes Labs noted that the same hacking group previously claimed to have stolen contract documents from the department in March. [3]

The United States Department of Homeland Security is the federal executive department responsible for public security, border control, cybersecurity, and immigration enforcement. As FTMQ Security reported earlier, a data dump published by Distributed Denial of Secrets on October 28, 2026, previously exposed sensitive personnel fields across multiple sub-agencies. [12][14]