Personal information of 40.000 US Department of Homeland Security employees leaked
Personal details of over 40,000 DHS employees were published online following an earlier breach. The dataset, affecting roughly one-fifth of the workforce, was reportedly obtained through an Okta single sign-on system a
Personal details of over 40,000 DHS employees were published online following an earlier breach.
The dataset, affecting roughly one-fifth of the workforce, was reportedly obtained through an Okta single sign-on system and shared via DDoSecrets after being exfiltrated in August.
The leaked data includes names, job titles, work email addresses, mobile phone numbers and office addresses. The people affected include border guards, security officers and senior ministry officials. The records represent about a fifth of the ministry's 220.000 employees.
Which employees are affected?
More than 21.000 of those records belong to Customs and Border Protection employees. About 10.000 records are related to Immigration and Customs Enforcement, while fewer than 1.000 are related to the Cybersecurity Agency (CISA).
Thousands more records concern personnel from headquarters, the Immigration and Naturalization Service, and the Federal Protective Service.
How did the leak happen?
An attacker using the alias Department of Peace claimed to have obtained the data from an Okta login system used by the department. He left a note saying that since the authorities have our data, it is only fair that we have theirs.
β³
READ ALSO
HACKS.GR / RELATED
Cyber ββAttacks & Data Breaches
Chinese hacker group sets up hidden network of devices to attack critical infrastructure
β
The stolen data was given to maia arson crimew and then shared with the DDoSecrets collective. TechCrunch reporters verified some of the data as genuine, matching the names of known employees. Timestamps indicate the files were accessed around mid-August.
In addition to personal information, the list includes information about internal user groups and access to programs and tools, such as Microsoft services, document editors, interface applications, and tools from other companies. Some user groups also reported access to artificial intelligence tools and research related to specific attack groups.
The response of those involved
Okta said it was aware of the report and that its own systems had not been compromised. The Department of Homeland Security did not immediately respond to requests for comment.
G
HACKS.GR / GOOGLE SEARCH
Hacks.gr on Google
Set Hacks.gr as a preferred source.
Preferred source
β
end of article
Originally published by Dev.to Security. Aggregated on AIWithGhost for educational purposes β full credit and traffic to the original publisher.