Leak site publishes data on more than 41,000 DHS employees obtained by hacktivists

A hacktivist group breached an Okta single sign-on (SSO) service used by the Department of Homeland Security, exfiltrating sensitive data on over 41,000 employees and contractors. The compromise of a centralized identity provider created a single point of failure, meaning one successful attack unlocked access to a broad swath of personnel data. This incident highlights the critical risk of over-relying on a single SSO layer without compensating controls such as multi-factor authentication, privileged access segmentation, and least-privilege enforcement. The sensitivity of the exposed data — including individuals involved in covert operations and leak investigations — amplifies the national security implications beyond a typical corporate breach.