The nonprofit Distributed Denial of Secrets published a database named Icepick on October 28 containing the work details of 41,191 U.S. Department of Homeland Security employees and contractors. The hacktivist group Department of Peace says it obtained the records through the Okta single sign-on service used by DHS, while Okta says it has no evidence that its systems or data were compromised. The archive includes 21,329 Customs and Border Protection staff, roughly 10,000 ICE employees and more than 55,000 internal permission groups, along with names, job titles, offices, email addresses, phone numbers and managers. DHS acknowledged a “potential breach” and sought the removal of the site, which stopped loading after a registrar hold was placed on its domain. Cybersecurity researchers warn that the exposed information could be used to impersonate supervisors, target investigators or identify employees involved in sensitive operations.
Source: Read the original article
