AN UNPRECEDENTED LEAK of Department of Homeland Security records has exposed details of more than 41,000 employees or contractors who work for the department and its constituent agencies. The records include email addresses, phone numbers, and office addresses, but also references to internal systems and sensitive information on undercover and surveillance programs. In all, the leak provides a map of how DHS is organized and how it operates.
The records, which span DHS itself as well as seven component agencies, including Immigration and Customs Enforcement and US Customs and Border Protection, were last updated on August 19, 2026. The transparency nonprofit Distributed Denial of Secrets and cybersecurity researcher and journalist maia arson crimew previewed the data to WIRED, which they say they obtained from a group calling itself the Department of Peace.
If they got this info from Okta, does that mean other companies using Okta are vulnerable?
My guess is they just phished someone’s Okta administration credentials.
Normally you have an okta policy that forces mfa to okta verify for access to the admin panel. If that wasn’t set up, this is a monumental fuck up by the admins.
This doesn’t read like a security issue on the part of Okta but rather on the part of DHS.
Probably. It’s a US company so it’ll always fail with minimal consequences, as compared to a state service or country with regulation.
It’s a case of when and how often.