A leaked dataset appears to reveal internal access groups and account associations involving the US Department of Homeland Security, Immigration and Customs Enforcement, Customs and Border Protection, and the Department of Defense. The records reportedly identify officials with access to exceptions for blocked websites, users of artificial-intelligence tools and encrypted messaging services, and personnel involved in immigration enforcement and military assistance.
DHS access groups include senior officials
Two privilege groups, named “Executive Leadership” and “AI Access,” appear to list people who were granted exceptions to DHS web filters that block some employee-facing websites. Both groups include the same 13 people, among them former DHS Secretary Kristi Noem and Antoine McCord, the recently retired DHS chief information officer. McCord returned to defense technology company Anduril.
The list also includes Philip Hegseth, identified as a senior advisor to the DHS secretary and the younger brother of Defense Secretary Pete Hegseth. Jace Krutchenfels, listed as a policy advisor, previously served as a regional field director for Donald Trump’s 2024 presidential campaign, according to his LinkedIn profile. Noem, McCord, Hegseth, and Krutchenfels did not respond to requests for comment.
Other leaked groups refer to AI services including OpenAI’s ChatGPT, Google’s Gemini, and Microsoft’s Copilot. A group named “Grok.com” includes eight DHS technology officials, including the agency’s former chief information officer and chief data officer.
“If it’s authentic and up-to-date, this is an invaluable intelligence resource for anyone trying to break into DHS,” said Alexander Leslie, a national security expert at threat intelligence firm Recorded Future. “This dataset becomes even more valuable when it is associated with previously compromised information, commercial data, and other information collections. Attackers can spend months exploiting these relationships to identify vulnerable individuals, develop convincing impersonation attempts, or compromise ongoing investigations.”
CBP accounts linked to messaging and facial-recognition tools
More than 700 accounts are associated with groups that clearly refer to Signal, an encrypted messaging app. Almost all of the accounts belong to CBP personnel.
More than 200 CBP accounts are part of a group associated with Mobile Fortify, a facial-recognition app used by immigration officials to identify people. The group includes field supervisors, special response team operators, and tactical and intelligence agents. About half of the accounts are located in Texas, California, and Arizona.
ICE and military-assistance accounts
Since July 4, 2025, when President Trump signed the One Big Beautiful Bill Act, approximately 1,300 ICE enforcement accounts have been created. The legislation funded the hiring of 10,000 new ICE enforcement and removal officers by the end of 2025.
Nearly 20 accounts appear to belong to Department of Defense employees, which the government refers to as the Department of the Army. Eight people belong to a group titled “ICE Tip Line DOW Surge.” Approximately 170 accounts are listed as providing “military processing assistance” at ICE facilities, while another 35 accounts explicitly identify members of the National Guard.
Source: arstechnica.com
