House Chairman Garbarino Engages CISA on DHS Personnel Data Breach Exposing Covert Operations Staff
House Homeland Security Chairman Andrew Garbarino said his staff is in contact with CISA and will monitor mitigation and victim notification while awaiting details on the intrusion, Inside Cybersecurity reported
DHS now faces a counterintelligence exposure as well as a privacy incident. The leaked directory of more than 40,000 personnel, including some undercover staff, remains on public mirrors despite an ICE takedown request, giving hostile services and criminal actors names, cell numbers, assignments and access-group data for targeted phishing and device compromise against cybersecurity and investigative staff. Okta single sign-on is the reported entry point, DHS has not said whether the flaw is closed, and timestamps suggest the data left in mid-August and went undetected for about two months. Garbarino's contact with CISA opens congressional oversight, with victim notification and covert-staff protection as DHS's first tests. Confidence is high, based on consistent reporting from three outlets, TechCrunch's matching of records to known employees, and CNN's finding that the data was partly accurate. The undercover exposure rests on one unnamed source, and the damage may prove smaller because the data is contact information rather than credentials.