A group calling itself the “Department of Peace” has released a massive trove of records on more than 41,000 Department of Homeland Security employees and contractors, including names, cellphone numbers, email addresses, office locations, membership in internal groups tied to undercover operations, wiretap programs, and surveillance tools.
The transparency nonprofit Distributed Denial of Secrets published the archive under the name “Icepick” on Wednesday after receiving the material from the “Department of Peace,” which claims it obtained the data from DHS’s Okta single sign-on login system.
The records were last updated on August 19, 2026, and cover DHS headquarters along with agencies including Immigration and Customs Enforcement, Customs and Border Protection, U.S. Citizenship and Immigration Services, and the Cybersecurity and Infrastructure Security Agency.
WIRED, which reviewed the data dump, reported that the leak maps out organizational structure, reporting lines, facility locations, and permission groups for sensitive programs.
The report noted, “The Trump administration has prosecuted protesters for posting information about individual ICE officers and warned others for doing so. In June, 15 Minnesota residents were charged under laws related to stalking and threats of violence, which prosecutors linked to their participation in ICE-opposition activities. More than 100 HSI agents, including undercover operatives, took part in an operation that included widespread surveillance and infiltration of group chats.”
The BBC reports:
Most of the agents included, more than 21,000 of them, work for CBP, according to the data. Nearly 6,600 work for ICE.
Other records show agents with Homeland Security Investigations, the Federal Protective Service and even people working for the Cybersecurity and Infrastructure Security Agency.
The leaked information also included dozens of previously unknown operation names, the agents that led and worked on those operations, and some of the technology they used in their work, including tech provided by Cellbrite and Palantir.
The hackers left a note with the files stating, “They have our information, so it’s only fair that we have theirs.”
