Hacker stole personnel data about thousands of Homeland Security employees, including CBP and ICE agents
- ID
- 40512
- Status
- summarized
- Published
- 29 Oct 2026, 4:01 AM
- Fetched
- 29 Oct 2026, 4:13 AM
- Provider
- TechCrunch
- Category
- technology
- Original URL
- https://techcrunch.com/2026/10/28/hacker-stole-personnel-data-about-thousands-of-homeland-security-employees-including-cbp-and-ice-agents/
- Source URL
- https://techcrunch.com/feed/
Summary
- Score
- 3.0
- Created
- 29 Oct 2026, 4:13 AM
- Tags
- Audience
- developerssaas_founders
What happened
A hacker using the handle 'Department of Peace' published personnel data on more than 40,000 U.S. Department of Homeland Security employees, including names, job titles, work emails, cell numbers, and office locations. The claimed source is an Okta single sign-on system used across DHS agencies, and the dataset reportedly also includes IT and login records plus which internal systems and apps each employee is permitted to access. Breakdown: about 21,000 CBP records, 10,000 ICE/HSI, just under 1,000 CISA, with the rest at headquarters and other agencies; the article is truncated and does not explain how initial access was obtained.
Why it matters
The leaked fields are not just contact details — the Okta records include per-user app entitlements, which is effectively a targeting map of who can reach which internal system. If you build or resell SaaS that authenticates enterprises through Okta or similar IdPs, decide now whether a compromised admin token or a bulk export in your tenant could dump tens of thousands of users with their permission mappings, and whether your integration needs to store that entitlement data at all. There is no direct Malaysian angle in the text, so treat this as an identity-architecture question rather than local news.
Discussion angle
Your SSO integration probably syncs group and app-entitlement data into your own database — if an attacker got read access to your tenant today, how much of a customer's internal access map would they walk away with, and can you cut that blast radius?