# ICE / DHS Employee Data Leak Investigation Canonical overview: https://hallattorneys.com/investigations/ice-dhs Published: October 28, 2026 Last reviewed: October 28, 2026 Department of Homeland Security · Immigration and Customs Enforcement Hall Attorneys is investigating reports of a leak involving Department of Homeland Security employee information, including personnel associated with Immigration and Customs Enforcement. We are reviewing how information was obtained and disclosed, the organizations responsible for safeguarding it, and potential claims on behalf of affected people. Received a notice, believe your employment information was exposed, or experienced related targeting or expenses? DHS employees, contractors, and others with a related privacy concern may request a case review. ## What has been reported? On October 28, 2026, WIRED reported a leak concerning more than 41,000 Homeland Security workers, including undercover ICE personnel. Straight Arrow News describes a dataset called Icepick spanning ICE, Customs and Border Protection (CBP), Homeland Security Investigations (HSI), the Cybersecurity and Infrastructure Security Agency (CISA), and other DHS components. The reported count is not a finding that every DHS employee was affected or that every record is current and accurate. Hall Attorneys has not independently verified the underlying dataset or established a particular person’s exposure. Sources: WIRED: October 28 report on Homeland Security employee data exposure: https://www.wired.com/story/massive-leak-exposes-41000-homeland-security-workers-including-undercover-ice-agents/ Straight Arrow News: Reporting on the DHS employee data breach: https://san.com/cc/shielded-by-dhs-immigration-agents-identities-exposed-in-massive-data-breach/ ## What information is reportedly involved? Straight Arrow News reports identity, contact, and organizational information, including: - Employee names and job assignments. - Telephone numbers and email addresses. - User-group memberships that may reveal work responsibilities or access permissions. These are reported categories, not a determination of what was exposed about any particular person. A group label alone does not establish an individual’s actual duties, current access, or participation in an operation. The reporting cited here does not establish exposure of Social Security numbers, passwords, financial accounts, or medical records. Hall Attorneys is investigating the scope of the disclosure and any resulting privacy, safety, or financial consequences. ## What is known about the source and timing? According to Straight Arrow News, a group calling itself the Department of Peace claimed responsibility. The report links the records to an Okta single sign-on service used by DHS. Single sign-on lets people access multiple work applications through one sign-in. Okta told TechCrunch it found no evidence its systems or data were compromised. An allegation involving a DHS service that uses Okta does not establish that Okta’s own platform was breached or that the company caused the exposure. The source of the records, method of access, and responsibility of any service provider require further investigation. October 28 is the reporting date, not a confirmed intrusion date. Straight Arrow News said the hack’s timing was unclear and that DHS, ICE, and CBP had not immediately responded to its requests for comment. That describes the status at publication, not a finding about subsequent agency action. Sources: TechCrunch: Reporting and Okta’s response: https://techcrunch.com/2026/10/28/hacker-stole-personnel-data-about-thousands-of-homeland-security-employees-including-cbp-and-ice-agents/ ## What are we investigating? Our inquiry concerns the handling of employee identity, contact, and job-related information; the safeguards applied to those records; and any notices or assistance provided after the reported disclosure. We are also reviewing how access to personnel directories was controlled, whether unnecessary personal or assignment information was retained or accessible, and how any unauthorized access was detected and addressed. These are questions for investigation, not conclusions about a security failure by DHS or a vendor. We are seeking information about unauthorized disclosure, attempts to misuse employee details, threats or unwanted contact, and documented expenses or other consequences. These are issues under investigation, not findings that every affected person experienced harm or has a legal claim. Employment by DHS, work for a contractor, or a relationship with an employee does not, by itself, establish that your information was included. Claims and available remedies depend on individual facts and the parties involved. ## Who should contact Hall Attorneys? We would like to hear from current or former DHS employees, ICE or CBP personnel, contractors, and other people who: - Received an agency, employer, or service-provider notice concerning this reported exposure. - Have information suggesting their personal or employment details were disclosed without authorization. - Experienced potentially related unwanted contact, impersonation, threats, account activity, expenses, or other consequences. You do not need a formal notice or known financial loss to request a review. A brief description of your concern is sufficient to begin. An inquiry does not publicly identify you as a client or plaintiff. ## What should you preserve? Keep notices, envelopes, emails, account alerts, and communications with your agency or employer. Preserve messages showing suspected misuse or unwanted contact and a dated record of relevant expenses, reports, and time spent responding. Keep existing evidence in your possession. Do not search for, download, or share the leaked personnel dataset or records about other people. Do not send Social Security numbers, passwords, government identification, classified information, sensitive operational details, undercover assignments, or personnel files in an initial email or website submission. Describe the records you already have; we will discuss an appropriate way to provide any documents needed. ## Contact Hall Attorneys Provide your name or preferred contact name, a way to reach you, whether you received a notice, and a brief description of your concern. You do not need to identify an assignment, facility, or other operational detail. Let us know whether it is safe to leave a voicemail. Keep sensitive records in your possession until we discuss any further information needed. Contacting the firm does not replace your agency’s or employer’s incident-reporting procedures. Email: nhall@hallattorneys.com Phone: 713-428-8967 Request a Case Review: https://hallattorneys.com/connect Attorney Advertising. Responsible attorney: Nicholas Hall, Hall Attorneys, P.C., Edna, Texas. Hall Attorneys is not affiliated with DHS, ICE, CBP, or any federal agency. This page describes an investigation into reported data exposure, not a filed lawsuit by Hall Attorneys concerning this incident. Individual exposure, legal responsibility, and compensation have not been determined. It provides general information, not legal advice. Contacting the firm or submitting information does not create an attorney-client relationship. No outcome is guaranteed.