DHS and ICE Contractor Data Breach Exposes Thousands of Entities A recent cybersecurity breach targeting the U.S. Department of Homeland Security’s (DHS) Office of Industry Partnership has exposed sensitive contract details involving over 6,600 organizations. The incident, first reported by the non-profit Distributed Denial of Secrets, was publicly disclosed by a hacking collective identifying itself as the Department of Peace. The leaked data includes comprehensive records of companies, government agencies, and universities that applied for or secured contracts with DHS and Immigration and Customs Enforcement (ICE). Among the affected entities are major firms such as Anduril, HBGary, L3Harris, Microsoft, Oracle, Palantir, and Raytheon, as well as federal agencies like the FBI and NASA. The compromised information spans: - Company names, URLs, and employee details (names, titles, contact information) - Business and personal addresses - Tax ID numbers, including Employer Identification Numbers (EINs) and potential Social Security Numbers (SSNs) - Government contractor identifiers (UEI numbers, CAGE codes) - Internal DHS staff comments on data updates - A secondary list detailing awarded contracts and their purposes, some of which were not publicly accessible via the DHS’s official portal The Department of Peace claimed the breach was motivated by opposition to DHS and ICE’s immigration enforcement policies, citing detentions, injuries, and deaths linked to their operations. The group stated its intent was to expose corporate and institutional ties to these agencies, though it acknowledged that some affected entities such as universities and public safety organizations were not the primary targets of its criticism. The full scope of the breach remains unclear, as the hackers described the data as "likely incomplete." The incident underscores ongoing risks to government contractor confidentiality and the potential for politically motivated cyberattacks to disrupt federal operations.