Ma'lumotlar buzilishi
41 000 dan ortiq DHS xodimlarining ma'lumotlari onlayn tarzda tarqaldi
Shaxsiy va ish ma'lumotlari joriy yilning boshida Okta yagona tizimga kirish tizimidan o'g'irlangan deb da'vo qilinmoqda.
Muallif
Ionut Arghire
| 2026-yil 29-oktabr (ET soat 8:54)
Bir tahdid aktori AQSh Ichki xavfsizlik departamenti (DHS) xodimlarining shaxsiy va ish ma'lumotlarini o'z ichiga olgan ma'lumotlar bazasini onlayn tarzda tarqatdi.
Department of Peace taxallusidan foydalanadigan xaker 41 000 dan ortiq yozuvni tarqatdi. "Ular bizning ma'lumotlarimizga ega, shuning uchun biz ham ularning ma'lumotlariga ega bo'lishimiz adolatli," deb yozdi xaker o'z eslatmasida.
Xakerning aytishicha, ma'lumotlar DHS xodimlari va pudratchilari markaziy muhitga kirish uchun foydalanadigan Okta yagona tizimga kirish tizimidan o'g'irlangan.
"Biz bu xabar haqida xabardormiz. Okta xavfsiz va bizning ma'lumotlarimiz yoki tizimlarimiz buzilganiga hech qanday dalil yo'q," deb aytdi Okta vakili SecurityWeek nashriga.
Tarqalgan yozuvlarning aksariyati AQSh Bojxona va chegarani himoya qilish xizmati (CBP), Immigratsiya va bojxona nazorati (ICE) hamda Ichki xavfsizlik tekshiruvlari (HSI) xodimlarining ma'lumotlarini o'z ichiga oladi.
Shuningdek, taxminan 1 000 ta CISA xodimi va DHSning boshqa bir nechta agentliklaridagi xodimlarning ma'lumotlari ham tarqalgan.
Buzilgan ma'lumotlar orasida ismlar, ish elektron pochta manzillari va telefon raqamlari, lavozim nomlari va ofis joylashuvlari, shuningdek, har bir hisob qaysi tizimlar va ichki ilovalarga kirish huquqiga ega ekanligini ko'rsatuvchi yozuvlar mavjud. Ma'lumotlarni qidirish uchun onlayn vosita ham mavjud.
Ma'lumotlar bazasining nusxasini olgan va uni "Icepick" deb atagan Distributed Denial of Secrets ma'lumotlariga ko'ra, tarqalgan ma'lumotlar yashirin va maxfiy operatsiyalarni boshqaradigan rasmiy shaxslarni hamda DHSning deportatsiya va ekstraditsiya dasturlaridagi asosiy xodimlarni aniqlaydi.
"Bu buzilishning eng xavotirli qismi — u bilan birga kelgan kirish ma'lumotlari. Agar hujumchi qaysi xodimlar qaysi tizim va ilovalarga kirish huquqiga ega ekanligini bilsa, ular keyingi qadamda qayerga borish va u yerga yetish uchun kimni nishonga olish kerakligi haqida yo'l xaritasiga ega bo'lishadi," dedi Illumio jamoat sektori CTO Gary Barlet.
SecurityWeek DHSga ma'lumotlar buzilishi haqida izoh so'rab elektron pochta yubordi va agar javob olsa, ushbu maqolani yangilaydi.
Ushbu hodisa mashhur ShinyHunters tovlamachilik guruhi FBI tizimlarini buzganidan bir oy o'tib va Ichki xavfsizlik axborot tarmog'i (HSIN) xakerlikka uchraganidan uch oy o'tib yuz berdi.
Bog'liq: Pentagon xodimlari agentligi ma'lumotlar buzilishi 3 million kishiga ta'sir qildi
Bog'liq: HHS arizasi iRhythm ma'lumotlar buzilishi 8,2 million kishiga ta'sir qilganini ko'rsatdi
Bog'liq: Bitta buzilgan kirish millionlab Kaliforniya talabalari yozuvlarini fosh qildi
Bog'liq: Arizona sud tizimiga kiberhujum natijasida 1 milliondan ortiq kishining shaxsiy ma'lumotlari o'g'irlandi
Yozgan: Ionut Arghire
Ionut Arghire SecurityWeek nashrining xalqaro muxbiridir.
Kundalik xabarnoma
So'nggi kiberxavfsizlik tahdidlari, tendensiyalar va mutaxassis fikrlari haqida xabardor bo'lish uchun SecurityWeek elektron pochta xabarnomasiga obuna bo'ling.
Biznes elektron pochta*
emailsignupsource
Qo'shimcha ma'lumot uchun Maxfiylik siyosatimizni o'qing.
Ionut Arghiredan ko'proq
- Xitoy bilan bog'liq xakerlar PHP2Shell zaifligidan foydalanib, xavfsizlik devorlarini buzmoqda
- Xakerlar yangi Oracle EBS zaifligini tekshirishni boshladi
- Sotuvchi kalitining sizib chiqishi 238 000 Denver Health Plan a'zolarining ma'lumotlarini xavf ostiga qo'ydi
- HPE tarmoq mahsulotlaridagi o'nlab muhim kamchiliklarni tuzatdi
- Tushunarsiz DreamHost hodisasi elektron pochta va FTP parollarini qayta o'rnatishga sabab bo'ldi
- O'lik Popcorn Time yangilovchisi millionlab kompyuterlarni nazoratga olish xavfiga duchor qildi
- Genesys xakerligi ichki tizimlardan mijoz ma'lumotlarini fosh qildi
- 953 ta onlayn do'kon uzoq davom etgan zararli dastur kampaniyasida zararlangan
So'nggi yangiliklar
- Xakerlar Sony'ning yapon ISP So-net tizimidan 2,6 million yozuvni o'g'irladi
- Cisco SD-WAN nol kun zaifligidan foydalanish Volt Typhoonning "Jim poyezd" tarmog'iga bog'landi
- Hujumchilar avgustdan beri ikkinchi Cisco xavfsizlik devori VPN nol kun zaifligidan foydalanmoqda
- HHS arizasi iRhythm ma'lumotlar buzilishi 8,2 million kishiga ta'sir qilganini ko'rsatdi
- Xitoy xakerlari ESXi jurnal yozish kamchiligini nol kun sifatida jimgina ishlatdi
- Ukraina Hive va Nefilim tovlamachilik sherigi AQShda 70 oy qamoqqa hukm qilindi
- Upwind Security 3,8 milliard dollar bahoda 400 million dollar jalb qildi
- Chrome va Firefox yangilanishlari 200 dan ortiq zaiflikni tuzatdi
Trendda
Tailscale "Tailworm" zaifliklarining muvofiqlashtirilmagan oshkor etilishidan so'ng tezda tuzatishlar chiqardi
Node2Shell: Brotli kamchiligi Microsoft, Node.js va Python paketlarida tuzatishlarga sabab bo'ldi
Xitoy bilan bog'liq xakerlar PHP2Shell zaifligidan foydalanib, xavfsizlik devorlarini buzmoqda
CISA Node2Shell zaifligidan foydalanish haqida ogohlantirdi, chunki honeypotlar hujum urinishlarini qayd etdi
iOS, macOS 27.2 286 ta xatoni tuzatdi; foydalanilayotgan zaiflikni tuzatish iOS 18 ga qayta qo'llandi
HPE tarmoq mahsulotlaridagi o'nlab muhim kamchiliklarni tuzatdi
Chrome va Firefox yangilanishlari 200 dan ortiq zaiflikni tuzatdi
Xakerlar yangi Oracle EBS zaifligini tekshirishni boshladi
Kundalik xabarnoma
So'nggi tahdidlar, tendensiyalar va texnologiyalar, shuningdek, soha mutaxassislarining chuqur fikrlari haqida xabardor bo'lish uchun SecurityWeek elektron pochta xabarnomasiga obuna bo'ling.
Biznes elektron pochta*
emailsignupsource
Qo'shimcha ma'lumot uchun Maxfiylik siyosatimizni o'qing.
Vebinar: CTEM dasturi uchun agentik pentesting
2026-yil 4-noyabr
Pentestlar orasidagi xavfsizlik bo'shliqlarini yoping. Ushbu sessiyada agentik pentestingni o'rganing va CTEM dasturingizda uzluksiz ta'sirni tekshirish uchun amaliy asosga ega bo'ling.
Ro'yxatdan o'ting
Virtual tadbir: CISO Forum 2026 sammiti
2026-yil 10 va 11-noyabr
CISOlar, yuqori darajadagi kiberxavfsizlik rahbarlari, amaliyotchilar, soha mutaxassislari va boshqa xavfsizlik rahbarlarini amaliy tajriba almashish va korporativ kiberxavfsizlik strategiyasini shakllantiradigan masalalarni ko'rib chiqish uchun birlashtiramiz.
Ro'yxatdan o'ting
Harakatdagi odamlar
Quantum eMotion Wayne Teepleni CTO etib tayinladi.
Guy Ellis NCC Group bosh direktori etib tayinlandi.
Noma Security Bobby Shokerni CFO va Alberto Rodriguesni CCO etib tayinladi.
Harakatdagi ko'proq odamlar
Mutaxassis fikrlari
Hech kim xavfsizlik so'rovnomasiga ishonmaydi. Shunga qaramay, biz unga tayanamiz.
Deyarli har bir B2B bitimni nazorat qiladigan jarayon — yuboruvchining ishonchsiz deb hisoblaydigan va qabul qiluvchining qabul qiladigan o'z-o'zini baholash. Nihoyat, kompaniyalar o'rtasida ishonch uchun yaxshiroq asos paydo bo'ldi. (Sravish Sridhar)
Bu yaxshi: NetScaler nol kun zaifliklari bizga yangi normal haqida nima aytadi
Agar tez orada Citrix NetScaler tuzatishlari chiqarilsa, tuzatish quvurlarini tayyor saqlang. (Tod Beardsley)
AI dasturiy ta'minot xavfsizligining kaliti tezlik emas, balki yetuklik
Sizning dasturchilaringiz AI qabul qilish shkalasida qayerda joylashganligi xavfsizlik xavfini qanday hal qilayotganingizga haqiqiy ta'sir qiladi. (Matias Madou)
Kontekst zamonaviy kiberhujumlarga qarshi kurashda qirol
Kontekstual himoya xavfsizlik jamoalariga signallarni bog'lash, keyingi qadamni oldindan ko'rish va tahdidlar kuchayishidan oldin ularni to'xtatishga yordam beradi. (Etay Maor)
AI hujum tezligini o'zgartirdi, xavfsizlik asoslarini emas
AI zaifliklarni aniqlash va ulardan foydalanishni tezlashtirgan sari, virtual tuzatish hali ham chuqur himoya va kuchli ilova xavfsizligi asoslariga bog'liq. (Joshua Goldfarb)
Data Breaches
Over 41,000 DHS Employee Records Leaked Online
The personal and work information was allegedly stolen from an Okta single sign-on system earlier this year.
By
Ionut Arghire
| October 29, 2026 (8:54 AM ET)
*
A threat actor has leaked online a database containing the personal and work information of thousands of US Department of Homeland Security employees.
The hacker, who uses the handle Department of Peace, has leaked more than 41,000 records. “They have our information, so it’s only fair that we have theirs,” the hacker wrote in a note.
According to the hacker, the data was stolen from an Okta single sign-on system used by DHS employees and contractors to access its central environment.
“We are aware of this report. Okta is secure, and we have no evidence our data or systems were compromised,” an Okta spokesperson told SecurityWeek.
Most of the leaked records reportedly contain information on US Customs and Border Protection (CBP), Immigration and Customs Enforcement (ICE), and Homeland Security Investigations (HSI) employees.
Roughly 1,000 CISA employees, along with personnel at several other DHS agencies, had their information leaked as well.
Advertisement. Scroll to continue reading.
The compromised data includes names, work email addresses and phone numbers, job titles, and office locations, as well as records showing which systems and internal applications each account can access. An online tool to search the data is also available.
According to Distributed Denial of Secrets, which obtained a copy of the database and calls it ‘Icepick’, the leaked information identifies officials in charge of covert and undercover operations and key personnel in DHS’s rendition and deportation programs.
“The most concerning part of this breach is the access information that came with it. If an attacker knows which employees have access to which systems and applications, they’ve essentially been handed a roadmap for where to go next and who to target to get there,” said Illumio public sector CTO Gary Barlet.
SecurityWeek has emailed DHS for a statement on the data breach and will update this article if it responds.
The incident surfaced one month after the infamous extortion group ShinyHunters breached FBI systems, and three months after the Homeland Security Information Network (HSIN) was hacked.
Related:Pentagon Personnel Agency Data Breach Impacts 3 Million People
Related:HHS Filing Puts iRhythm Data Breach Toll at 8.2 Million
Related:One Compromised Login Exposed Millions of California Students’ Records
Related:Personal Information for Over 1 Million People Stolen in a Cyberattack on Arizona’s Court System
Written ByIonut Arghire
Ionut Arghire is an international correspondent for SecurityWeek.
Daily Briefing Newsletter
Subscribe to the SecurityWeek Email Briefing for the latest cybersecurity threats, trends, and expert insights.
Business Email*
emailsignupsource
Read our Privacy Policy for more information.
More from Ionut Arghire
- China-Linked Hackers Exploit PHP2Shell to Root Firewalls
- Hackers Start Probing Fresh Oracle EBS Vulnerability
- Vendor Key Leak Puts Data of 238,000 Denver Health Plan Members at Risk
- HPE Patches Dozens of Critical Flaws in Networking Products
- Unexplained DreamHost Incident Prompts Email, FTP Password Resets
- Dead Popcorn Time Updater Put Millions of Computers at Risk of Takeover
- Genesys Hack Exposes Customer Data From Internal Systems
- 953 Online Stores Infected in Long-Lasting Malware Campaign
Latest News
- Hackers Steal 2.6 Million Records From Sony’s Japanese ISP So-net
- Cisco SD-WAN Zero-Day Exploitation Tied to Volt Typhoon’s ‘Silent Train’ Network
- Attackers Exploit Second Cisco Firewall VPN Zero-Day Since August
- HHS Filing Puts iRhythm Data Breach Toll at 8.2 Million
- Chinese Hackers Quietly Used Low-Severity ESXi Logging Flaw as Zero-Day
- Ukrainian Hive and Nefilim Ransomware Affiliate Gets 70 Months in US Prison
- Upwind Security Raises$400 Million at$3.8 Billion Valuation
- Chrome and Firefox Updates Patch Over 200 Vulnerabilities
Trending
Tailscale Rushes Patches After Uncoordinated Disclosure of ‘Tailworm’ Flaws
Node2Shell: Brotli Flaw Triggers Patching Across Microsoft, Node.js, Python Packages
China-Linked Hackers Exploit PHP2Shell to Root Firewalls
CISA Warns of Node2Shell Exploitation as Honeypots Log Attack Attempts
iOS, macOS 27.2 Patch 286 Bugs; Fix for Exploited Flaw Backported to iOS 18
HPE Patches Dozens of Critical Flaws in Networking Products
Chrome and Firefox Updates Patch Over 200 Vulnerabilities
Hackers Start Probing Fresh Oracle EBS Vulnerability
Daily Briefing Newsletter
Subscribe to the SecurityWeek Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.
Business Email*
emailsignupsource
Read our Privacy Policy for more information.
Webinar: Agentic Pentesting for a Stronger CTEM Program
November 4, 2026
Close the security gaps between pentests. Join this session to explore agentic pentesting and gain a practical framework for continuous exposure validation in your CTEM program.
Register
Virtual Event: CISO Forum 2026 Summit
November 10 & 11, 2026
Join as we bring together CISOs, senior cybersecurity executives, practitioners, industry experts, and other security leaders to share practical experience and examine the issues shaping enterprise cybersecurity strategy.
Register
People on the Move
Quantum eMotion has named Wayne Teeple as CTO.
Guy Ellis has been appointed CEO of NCC Group.
Noma Security has named Bobby Shoker as CFO and Alberto Rodrigues as CCO.
More People On The Move
Expert Insights
*
Nobody Trusts the Security Questionnaire. We Rely on It Anyway.
The process that gates nearly every B2B deal is a self-assessment the sender distrusts and the receiver accepts. There is finally a better basis for trust between companies.(Sravish Sridhar)
This is Fine: What NetScaler Zero-Days Tell Us About the New Normal
Keep your patch management pipelines primed in case another round of Citrix NetScaler patches get released soon.(Tod Beardsley)
The Key to AI Software Security Isn’t Speed, It’s Maturity
Where your developers sit on the AI adoption scale has a real impact on how you are addressing security risk.(Matias Madou)
Context Is King in the Fight Against Modern Cyberattacks
Contextual defense helps security teams connect the signals, anticipate what comes next, and stop threats before they escalate.(Etay Maor)
AI Has Changed Attack Speed, Not Security Fundamentals
As AI accelerates vulnerability discovery and exploitation, so-called virtual patching still comes down to defense-in-depth and strong application security fundamentals.(Joshua Goldfarb)