Hacktivists leak details of more than 41000 US Homeland Security staff

Records on more than 41000 current and former staff and contractors of the US Department of Homeland Security have been published online. The data includes names, work emails, phone numbers, job titles and group memberships. Some entries point to sensitive roles in surveillance, forensics and undercover work. A hacktivist group took responsibility and gave the files to a transparency nonprofit.

The group says it got in through a cloud single sign-on service used by the department. The identity vendor named in reports says it has no evidence its own systems were compromised. The department said it is aware of a potential breach and is working to address it. For any organisation, the case is a reminder that a single sign-on account opens every door behind it, so its access rights and logs deserve the closest watch.