The leaked archive, dubbed Icepick, contains data on 41,000 employees across the Department of Homeland Security and seven component agencies, including ICE and CBP. The records were last updated on August 19, 2026, and were published by the nonprofit Distributed Denial of Secrets.
Data analysis reveals that CBP staff represent over half of the records, while ICE accounts for 10,000 entries. The files also include 6,200 records from US Citizenship and Immigration Services and nearly 1,000 from the Cybersecurity and Infrastructure Security Agency.
The leaked information details over 55,000 internal permission groups, including those linked to undercover operations, wiretap programs, and surveillance tools like Palantir Falcon and PenLink. Some groups reference access to AI platforms such as ChatGPT, Gemini, and Grok.
The dataset covers approximately one-seventh of the DHS workforce, including senior leadership and contractors. It also lists personnel from the Department of Defense and National Guard, as well as local law enforcement officers authorized for immigration duties.
DHS stated it is aware of a potential breach and is working to address the situation. An Okta spokesperson denied any compromise of its systems, stating the company has no evidence of a breach.
