Icepick hack strips DHS agents of their masked impunity

By Alma Cordero · Reporting from El Paso · October 29, 2026

The files that federal managers thought would stay buried behind Okta logins

When a security breach hits an agency like the Department of Homeland Security, Washington pulls up the drawbridge. We saw that reflex last month when hackers took personal files from FBI agents. But Wednesday brought something different. The transparency group Distributed Denial of Secrets worked with researcher maia arson crimew. Together, they published a searchable database named Icepick. The leak exposed the personal details of more than 41,000 DHS personnel.

An entity calling itself the Department of Peace obtained the records. The files expose names, work addresses, phone numbers, and job descriptions across multiple agencies. According to reporting from the BBC, MyJoyOnline, Daily Maverick, Rappler, Free Malaysia Today, and DW, more than 21,000 records belong to Customs and Border Protection agents. Nearly 6,600 belong to Immigration and Customs Enforcement personnel. The database also exposes staff from Homeland Security Investigations, the Federal Protective Service, and the Cybersecurity and Infrastructure Security Agency. Emma Best, a co-founder of Distributed Denial of Secrets, explained the purpose. She stated that the aim was to replace "anonymity with accountability." Best noted that the leak identifies officials running covert operations, the hunt for leakers, and the failed BlueLeaks investigation. It also names key personnel in DHS's ever-escalating rendition and deportation programs.

This mechanism descends directly from BlueLeaks, the 2020 release of 269.21 gigabytes of internal law enforcement data obtained by Anonymous and published by Distributed Denial of Secrets. BlueLeaks stripped away the anonymity of local police departments to expose systemic violence. In the same way, the Icepick database pierces the digital perimeter of a federal immigration apparatus operating with near-total impunity. Meanwhile, an Okta spokeswoman insisted that "Okta is secure, and we have no evidence our data or systems were compromised." That response echoes the standard corporate denial. Tech firms always recite it when single sign-on portals fail to keep out the light.

A machine built on million-deportation quotas and masked street-level raids

To understand why Icepick causes panic, look at what Homeland Security has done under Secretary Markwayne Mullin. He took office in March 2025. According to data from the Migration Policy Institute, the United States has enacted nearly 1 million deportations since President Donald Trump returned to office. More than 70% of those removals involved people with no criminal record. Mullin drove this machinery with an aggressive push. He suspended travel programs, ratified civil penalties, and shortened response times for refugee terminations. He also finalized rules ending automatic extensions for work permits.

This year, ICE operations have repeatedly turned violent. Agents have shot at more than two dozen people and killed at least nine. Among the dead are Alex Pretti and Renee Good. ICE agents shot both in Minnesota, even though neither was an arrest target. These officers now find their names, phone numbers, and assignments inside the Icepick database. For months, agents carried out raids behind masks and sunglasses. They routinely hid their identities, ignoring statutory requirements to identify themselves. A spokesperson for the Department of Peace explained the hack directly. "On July 17th, Markwayne Mullin said he was 'turning up the heat'," the group wrote. "This is what happens to ICE when you do that."

Defenders of the security state will argue that exposing work addresses and phone numbers threatens officer safety. That is their familiar defense. They claim public servants should not face targeted harassment for executing federal law. But that defense collapses under the weight of the agency's own conduct. Armed agents operate behind balaclavas and mirrored sunglasses. They ignore statutory identification rules while executing deportation quotas against people with clean records. They do not act like ordinary public servants. They operate like an anonymous occupying force. The Icepick leak does not endanger officers by subjecting them to scrutiny. It strips away the shield that let them violate civil rights in the dark.

The ledger of a border where transparency is treated as a federal threat

We have lived through this cycle before in the borderlands. The expansion of the security state always outruns democratic oversight. This moment echoes how Edward Snowden's leak of NSA documents in 2013 exposed the vast scale of state surveillance to force public accountability. We saw it in the massive post-9/11 consolidation of federal agencies. We see it in El Paso, where Border Patrol apprehended over 1,248,000 people between fiscal year 2021 and August 2026. Across those years, Washington treated transparency as a threat. The Icepick database exposes dozens of secret operation names and internal rosters. It also reveals surveillance technologies provided by Cellebrite and Palantir. These contractors supply the tools for mass deportation, hiding behind federal contracts and classification stamps.

A DHS spokesperson said the agency is "aware of a potential breach and is actively working to address the situation swiftly and effectively." That is not a promise of reform. It signals retaliation against hacktivists and researchers who shine a light on state violence. History shows federal agencies will hunt down leakers while shielding abusive officers. Emma Best and maia arson crimew built a tool that turns internal directories into public records. They gave journalists and investigators the raw data needed to map mass deportations. You cannot tear apart communities and kill unarmed people like Alex Pretti and Renee Good while expecting corporate clouds to protect your secrets.

Homeland Security cannot hide its deportation machine behind Okta portals and masked operatives forever. Agency threats will not put this information back in the bottle. Justice requires that every agent who operates outside the law face public accountability for the harm done in our communities.

Icepick hack strips DHS agents of their masked impunity

The files that federal managers thought would stay buried behind Okta logins

A machine built on million-deportation quotas and masked street-level raids

The ledger of a border where transparency is treated as a federal threat

Sources