CUTSIGNcutting for sign — daily OSINT threat read

Search — “Department of Peace”

1 story · 0 IoCs

Stories

P3

Leaked database allegedly containing 41,000+ DHS employee records, claimed stolen from an Okta SSO system; Okta denies compromise

brief 2026-10-30quick readMediumactor: Department of Peace

A threat actor using the handle Department of Peace leaked a database of over 41,000 DHS staff records, including CBP, ICE, HSI and about 1,000 CISA employees, claiming the data came from an Okta single sign-on system. The leaked records reportedly include names, work emails, phone numbers, job titles, office locations, and which systems and applications each account can access. Okta says it has no evidence its data or systems were compromised, and DHS says it is aware of a potential breach; hunters should treat the access-mapping data as a targeting risk rather than confirmed SSO compromise.