Trump Administration Seeks Takedown of Leaked ICE Personnel Data; Icelandic Host Refuses

DHS warns the more than 40,000 identifiable employees face risks of harassment, stalking and physical harm.
Federal officers carrying out an enforcement programme are not private individuals
FlokiNET's public statement explaining why it refused DHS's request to remove the leaked employee data.
Mark

Why does this one letter matter so much?

Mimi

It shows how far the government will go to pull data offline. DHS used a private cybersecurity firm to ask an Icelandic host to take down a site listing more than 40,000 employees, and the host said no.

Mark

But the site still went down, didn't it?

Mimi

The registrar suspended the domain. The information has since moved to another one, and other groups have copied it, so it's hard to see it vanishing.

Luke

Let me separate a few things. The 40,000 figure and the claim of risk come from the takedown letter itself. That's DHS's side, not an independent count of anyone harmed.

Mark

And who actually leaked it?

Luke

A group calling itself "Department of Peace" claims it. That's a claim. DDoSecrets posted the database, but we haven't been told how the data was obtained or whether it's accurate.

Mimi

FlokiNET's argument is that officers running an enforcement program aren't private individuals, and the public has a legitimate interest in knowing who they are.

Mark

How does that connect to the masks?

Mimi

Agents have worn masks or street clothes, and the administration cites safety when it won't name them. Critics say that leaves people little recourse over alleged abuses.

Luke

Fair, but the shootings and civil liberties cases are background here, not proof about this dataset. Nothing reported says any listed employee has been harassed or hurt. The danger DHS describes is a warning, not a documented outcome.

Mark

So what's unknown?

Luke

What the data contains, how accurate it is, and whether anyone will face legal action over it. None of that is in the reporting.

  • A leaked dataset naming more than 40,000 ICE and CBP personnel surfaced on a public site and set off an urgent government demand for its removal.
  • DHS, acting through a cybersecurity firm, warned that employees faced harassment, stalking and physical danger, and called the data stolen.
  • FlokiNET refused to take it down, insisting that officers enforcing policy act in public capacity and that the public has a legitimate interest in knowing them.
  • The registrar suspended the domain, but the material had already spread to other sites, so the effort to contain it is landing in a stalemate rather than resolution.

In a quiet collision between state secrecy and public accountability, the United States government sought to pull a leaked roster of tens of thousands of its immigration and border officers off the internet, through a small Icelandic host that refused. The episode belongs to a longer human argument about who a public servant is when they wear the uniform of enforcement, and whether those who carry out state power may act without being seen. Its outcome, for now, is less a settled answer than a reminder that information, once released, rarely returns to the box it came from.

On Thursday, Icelandic hosting company FlokiNET revealed a letter it had received on behalf of the US Department of Homeland Security, sent through the cybersecurity firm ZeroFox. It asked the company to remove a website, icepi.cx, that compiled information on tens of thousands of DHS employees, including staff at Immigration and Customs Enforcement and Customs and Border Protection. The letter called the material stolen, said it breached FlokiNET's terms of service, and warned that more than 40,000 people could face harassment, stalking and physical harm.

FlokiNET said no. Its public statement argued that federal officers carrying out an enforcement programme are not private individuals while doing so, and that the public has a legitimate interest in knowing who is doing that work and under whose authority. The refusal did not end the matter: the domain's registrar later suspended it, yet the data had already reappeared elsewhere.

The dataset first appeared on Wednesday, posted by Distributed Denial of Secrets, a group known for publishing leaked government records. A hacker collective calling itself the "Department of Peace" claimed to have obtained and shared the material. Because copies have spread across several sites, a complete takedown now looks unlikely.

The request sits within a broader pattern. Last year the Justice Department pressed Apple to remove apps tracking ICE agents, including ICEBlock, prompting objections from Democrats and free-speech advocates, among them Representative Jamie Raskin. Meanwhile, the administration often declines to name agents involved in operations, and agents have concealed their identities with masks or plain clothes, leaving rights groups with little recourse when force or misconduct is alleged. Since Trump's second swearing-in, at least 25 people have been shot at by immigration agents, six fatally. The dispute over who may be named, and who may be shielded, is likely to continue.

On Thursday, an Icelandic web hosting company called FlokiNET published a letter it had received from the US government, or more precisely from a firm acting for it. The letter came from the cybersecurity company ZeroFox, writing on behalf of the Department of Homeland Security (DHS), and it asked FlokiNET to take down a website holding information on tens of thousands of DHS employees.

The letter accused FlokiNET of breaking its own terms of service by hosting a "stolen" employee dataset, and it asked the company to "remove or disable" the material. It also made a claim about danger: the content was live, it said, and put more than 40,000 identifiable individuals at risk of harassment, stalking and physical harm.

According to FlokiNET, the letter concerned a single domain, icepi.cx. The site compiled information about employees across a range of DHS agencies, among them Immigration and Customs Enforcement (ICE) and Customs and Border Protection (CBP). Both agencies have been under intense scrutiny since President Donald Trump began his mass deportation campaign in 2025.

FlokiNET says it refused to comply and defended that decision in a public statement. "Federal officers carrying out an enforcement programme are not private individuals while they are carrying it out," the company wrote. "The public has a legitimate interest in knowing who is doing that work, under whose authority, and in which office." The refusal did not settle the matter, though. The website's registrar ultimately suspended the domain, and the employee information has since reappeared on a different one.

The database first surfaced on Wednesday, when Distributed Denial of Secrets (DDoSecrets) posted it. The group showcases leaked government data and has previously released emails from the convicted sex offender Jeffrey Epstein, as well as material from the Israeli Ministry of Justice and from police departments in the United States. A hacker group calling itself the "Department of Peace" has claimed responsibility for obtaining and sharing the DHS data. Since the first publication, other groups have spread the information elsewhere, including through icepi.cx, so it is unlikely to be fully scrubbed from the internet.

The takedown request fits a pattern. Last year the US Department of Justice pressured major technology companies, Apple among them, to remove apps that track ICE agents, including one called ICEBlock. Democrats and free-speech advocates pushed back, arguing the public has a right to report on ICE's movements. Democratic Representative Jamie Raskin wrote to Apple that blocking such apps at the government's request raised the possibility that the company was helping the government violate its customers' First Amendment right to record and report on official activity, and he asked it to review the decision.

The administration has also often declined to identify DHS agents involved in particular operations, citing safety risks. Immigration agents have taken steps of their own to hide their identities during operations, including wearing face masks or plain clothes. Human rights groups and immigration advocates say this leaves them little recourse when they allege excessive force or impropriety during raids.

The record they point to is serious. Since Trump's second swearing-in, at least 25 people have faced gunfire from immigration agents, and six of those shootings were fatal. Other cases have involved alleged civil liberties violations, including unlawful arrests and racial profiling, along with contested tactics such as car ramming and tackling.

With the data now spread across multiple sites, a full removal looks unlikely, and the dispute over who may be named, and who may be shielded, is likely to continue.

The public has a legitimate interest in knowing who is doing that work, under whose authority, and in which office.
— FlokiNET statement
The content is live and places more than 40,000 identifiable individuals at risk of harassment, stalking, and physical harm.
— ZeroFox letter on behalf of DHS
Quieres la nota completa? Lee el original en Al Jazeera ↗
Contáctanos FAQ