DHS asks Icelandic host FlokiNET to take down leaked data on personnel
The US Department of Homeland Security says a database of more than 40,000 staff puts them at risk of harassment, stalking and physical harm, but the Icelandic host says the data only holds work details.
At a glance
- DHS asked Icelandic host FlokiNET to remove or restrict access to leaked data on more than 40,000 agency personnel.
- FlokiNET's CEO told Reuters it would not remove the data, saying it held work addresses and phone numbers, not personal details.
- DDoSecrets published the data on Wednesday; a group calling itself "the Department of Peace" claimed responsibility.
The US Department of Homeland Security (DHS) asked Icelandic hosting company FlokiNET on Thursday to take down or limit access to data relating to thousands of agency personnel, saying the content put them at risk.
The request, posted online by FlokiNET, said the database "places more than 40,000 identifiable individuals at risk of harassment, stalking and physical harm". ZeroFox, a company authorized by the US Immigration and Customs Enforcement (ICE) agency to pursue content removal actions, cited the figure in an email to the host.
Host declines to remove data
FlokiNET's chief executive, Kolja Weber, told Reuters his company would not remove the DHS data because it included government employee work addresses and work phone numbers, not personal phone numbers and addresses.
A DHS spokesperson said the agency "is aware of a potential breach and is actively working to address the situation swiftly and effectively". The spokesperson added: "We take all security threats against our employees and officers seriously and will work to ensure all are properly protected."
Data published, then republished
The non-profit data transparency group DDoSecrets released data on more than 40,000 DHS personnel on its website on Wednesday, alongside a separate, searchable database developed by hacker and journalist "maia arson crimew". The database was briefly inaccessible on Thursday but was soon republished at a different domain.
A group calling itself "the Department of Peace" claimed responsibility for obtaining the data. In a statement on Wednesday it said DHS employees "have our information, so it's only fair that we have theirs", and that it hoped the data "can be used to limit further harm by the DHS and supports all efforts in that direction".
Privacy advocates have criticized the DHS's use of personal data from other agencies, including Medicaid records and taxpayer data, for immigration enforcement.
Source: The Guardian World.
Questions and answers
- What data was leaked from DHS?
- DDoSecrets released data on more than 40,000 DHS personnel on Wednesday, alongside a searchable database built by hacker and journalist "maia arson crimew". DHS says the material puts those individuals at risk of harassment, stalking and physical harm.
- Why did FlokiNET refuse to take the data down?
- FlokiNET chief executive Kolja Weber told Reuters the data included government employee work addresses and work phone numbers, not personal phone numbers and addresses, so the company would not remove it.
- Who claimed responsibility for obtaining the DHS data?
- A group calling itself "the Department of Peace" said it obtained the data. It argued that DHS employees "have our information, so it's only fair that we have theirs".
