Hackers claim to have leaked data of over 40,000 employees of the US Department of Homeland Security via an Okta breach, with DDoSecrets publicly releasing the information.

According to TechCrunch, a hacker identifying as "Department of Peace" claimed to have obtained a large volume of employee data from the Okta single sign-on system used by the U.S. Department of Homeland Security (DHS). The data was publicly released Wednesday as the "Icepick" dataset by transparency organization Distributed Denial of Secrets (DDoSecrets). The leaked records number over 40,000, roughly one-fifth of DHS’s approximately 220,000 employees. The data includes names, job titles, work emails, phone numbers, office locations, and internal system access permissions. Among the records, around 21,000 belong to Customs and Border Protection (CBP) staff, roughly 10,000 relate to Immigration and Customs Enforcement (ICE) and Homeland Security Investigations (HSI), and nearly 1,000 are from the Cybersecurity and Infrastructure Security Agency (CISA). TechCrunch said it verified the authenticity of some data, with timestamps indicating the data was exported around mid-August. The hacker also provided the data to journalist and hacker maia arson crimew, who then forwarded it to DDoSecrets. Okta responded that its systems and data were not breached; a DHS spokesperson did not immediately reply to a request for comment. The report notes this is the third high-profile U.S. government data breach in the past month, following earlier thefts of FBI personnel files and Pentagon personnel data.