A contractor for the Department of Homeland Security (DHS) has requested the removal of online access to a database containing information on over 41,000 employees, which hacktivists claim to have obtained through a breach. The database, known as Icepick, briefly went offline before reappearing under a different registrar, raising questions about data security and privacy.
The Icelandic hosting provider FlokiNET confirmed on Thursday that it received a request from ZeroFox, the DHS contractor, to take down the Icepick database. However, FlokiNET refused the request, stating that the domain was taken offline by another registrar, CentralNic, which placed it on serverHold. FlokiNET noted that the decision to remove the site was made without their involvement, leading to a temporary loss of access for users.
In a blog post, FlokiNET explained, “Our refusal kept nothing online,” emphasizing that the request to take down the site was mischaracterized as part of a doxxing campaign. The company argued that the information in Icepick pertains to public officials and their roles, rather than private individuals, and that there is a public interest in knowing who is performing government functions.
In response to the breach, a DHS spokesperson stated that the agency is aware of the situation and is actively working to protect its employees. “We take all security threats against our employees and officers seriously and will work to ensure all are properly protected,” the spokesperson said, adding that updates will be provided as more information becomes available.
The social media platform Bluesky has also taken steps to block links to the Icepick archive, citing concerns over the unauthorized sharing of personal contact information. However, a company official indicated that changes are forthcoming to address the labeling of the link as malicious.
ZeroFox, in its communication with FlokiNET, maintained that the request for removal was based on the fact that the data was stolen and constitutes personal information that could identify and locate individuals. The ongoing dispute highlights the complexities surrounding data privacy, public interest, and the responsibilities of hosting providers in the face of cybersecurity incidents.
As the situation develops, the implications for data security and the protection of public officials’ identities remain significant, prompting discussions about the balance between transparency and privacy in government operations.
For further details, see the report from CyberScoop.
