DHS Leak Exposes 40,000 Personnel in Major Data Breach 2026

The DHS data leak has exposed more than 40,000 Department of Homeland Security personnel, prompting the agency to seek removal of the data from an Icelandic hosting company. The request, posted online by hosting firm FlokiNET, claims the database places identifiable individuals at risk of harassment, stalking, and physical harm.

What Happened in the DHS Data Leak?

On Thursday, the Department of Homeland Security asked Icelandic hosting company FlokiNET to take down or limit access to data related to thousands of agency personnel. The request, posted online by FlokiNET, stated that the database “places more than 40,000 identifiable individuals at risk of harassment, stalking and physical harm.”

ZeroFox, a company authorized by US Immigration and Customs Enforcement (ICE) to pursue content removal actions, cited the figure in an email to FlokiNET. However, FlokiNET’s CEO, Kolja Weber, told Reuters that his company would not remove the DHS data because it included government employee work addresses and work phone numbers, not personal phone numbers and addresses.

A DHS spokesperson said the agency “is aware of a potential breach and is actively working to address the situation swiftly and effectively. We take all security threats against our employees and officers seriously and will work to ensure all are properly protected.”

Who Is Affected and Why It Matters

The leak affects more than 40,000 DHS personnel, including employees and officers. The data reportedly includes work addresses and work phone numbers, which the agency argues could put individuals at risk. The non-profit data transparency group DDoSecrets released data on more than 40,000 DHS personnel on its website on Wednesday, alongside a separate, searchable database developed by hacker and journalist “maia arson crimew.” Context on how this played out before sits in DHS Leak Exposes 40,000 Personnel in Major Data Breach.

The database was briefly inaccessible on Thursday but was soon republished at a different domain. A group calling itself “SiegedSec” claimed responsibility for the hack, according to the excerpt. The incident raises concerns about the security of government systems and the potential for misuse of personal information. The background to this story is set out in DHS Data Leak Exposes 41,000 Homeland Security Workers. A related thread runs through Jabaroot: The Mystery Hacker Behind Morocco's Biggest Data Leaks.

Key Takeaways from the DHS Data Leak

• Over 40,000 DHS personnel are affected by the leaked data, which includes work contact information.
• DHS sought takedown from Icelandic host FlokiNET, citing risks of harassment and physical harm.
• FlokiNET refused to remove the data, arguing it contains only work-related information.
• DDoSecrets and “maia arson crimew” published the data and a searchable database.
• SiegedSec claimed responsibility for the hack, though this is unverified.

Comparison of Data Types in the Leak

What to Watch Next

The DHS is actively working to address the situation, but the data remains accessible at a new domain. The dispute between DHS and FlokiNET highlights the challenges of enforcing takedown requests across international hosting providers. It also underscores the tension between transparency and security. Earlier coverage in Celebrity: latest articles shows how the argument developed. A closer look at the same subject appears in Elvis Presley Estate Sues Anthropic Over AI Training Songs.

As the investigation continues, watch for official statements from DHS and ICE, potential legal actions against the hosting company, and any further leaks. The involvement of ZeroFox suggests the agency is taking the matter seriously and may pursue additional removal efforts. Anyone following the wider picture can start with Corey Lewandowski Under Criminal Investigation for Profiting. The same theme surfaces in Vivek Ramaswamy Pulls Controversial Attack Ad in Ohio Governor Race, which takes a different angle.

The DHS data leak is a reminder of the growing threat of cyberattacks on government agencies. For more on how organizations respond to such breaches, see our coverage of vaccinating 1,000 wild penguins against bird flu, which highlights the importance of proactive measures in protecting populations.