The massive leak exposes 41,000 DHS workers and undercover ICE agents through permission groups such as "Executive Leadership" and "AI Access." These two permission groups contain the same 13 individuals who received exceptions to the DHS web filter. The list includes former DHS head Kristi Noem, former DHS chief information officer Antoine McCord, policy adviser Jayce Krachenfels, and Philip Hegseth, who serves as a senior adviser to the DHS secretary. McCord returned to the defense tech company Anduril, while Krachenfels previously worked as a regional field director for Donald Trump’s 2024 presidential campaign. I find the exposure of these names alongside AI tool access groups like "Grok.com" to be a significant security failure. That group contains eight DHS technology officials, including the department’s former chief information officer and chief data officer. Alexander Leslie, a national security expert at the threat intelligence company Recorded Future, says, "If authentic and current, this is an extraordinarily valuable intelligence resource for those seeking to penetrate DHS. This dataset becomes way more valuable when correlated with previously compromised information, commercial data, and other intelligence collections. An adversary could spend months exploiting these relationships to identify vulnerable personnel, develop convincing impersonation attempts, or compromise ongoing investigations."
CBP and ICE data
Data from the leak shows 700 accounts associated with Signal, which mostly belong to CBP personnel. Another 200 CBP accounts reference Mobile Fortify, a face-recognition app used by immigration agents to identify people. This group includes field supervisors, special response team operators, and tactical and intelligence agents, with about half of them located in Texas, California, and Arizona. I see 1,300 ICE enforcement accounts created since July 4, 2025, when Trump signed the One Big Beautiful Bill Act to fund 10,000 new ICE Enforcement and Removal officers by the end of 2025. The leak also lists 170 accounts for military processing support at ICE facilities and 35 accounts for National Guard members. Eight accounts belong to a group titled "ICE Tip Line DOW Surge," and nearly 20 accounts belong to personnel with the Department of Defense. I note that the groups referencing AI tools mention OpenAI’s ChatGPT, Google’s Gemini, and Microsoft’s Copilot.
