Skip to content
June 23, 2026
  • Linkedin
  • Twitter
  • Facebook
  • Youtube

Daily CyberSecurity

Zero-hour alerts. Unmatched analysis.

Primary Menu
  • Home
  • CVE Watchtower
  • Cyber Criminals
  • Data Leak
  • Linux
  • Malware
  • Vulnerability
  • Submit Press Release
  • Vulnerability Report
Light/Dark Button
  • Home
  • News
  • Data Leak
  • U.S. Department of Homeland Security admitted that 240,000 citizens information leak
  • Data Leak

U.S. Department of Homeland Security admitted that 240,000 citizens information leak

Do Son January 4, 2018 2 minutes read
Add as a preferred
source on Google

US Department of Homeland Security (DHS) confirmed on Wednesday that the agency takes place personal information data breaches involving personally identifiable information of over 240,000 current and former employees of DHS. The agency said the divulged Homeland Security employee personal information includes name, social security number, date of birth, job title, level and place of work, etc.

Although the agency stressed that data was not stolen during cyber attacks and was not affected by malicious activity, it disclosed some details about how information was leaked. The agency said the files were discovered by a former OIG employee during a criminal investigation conducted in May last year.

The identity of the former employee was not disclosed and the focus of the criminal investigation was unknown. According to the agency, information such as names, social security numbers, date of birth, job title, level and place of work of DHS staff has been disclosed.

Why is it that it takes about seven months to notify the affected employees? The agency said on its website:

“a thorough privacy investigation, extensive forensic analysis of the compromised data, an in-depth assessment of the risk to affected individuals, and comprehensive technical evaluations of the data elements exposed.”

According to the US Department of Homeland Security, a large number of survey data are also at risk in addition to employee data. DHS said that it

“did not include any information about employees’ spouses, children, family members and/or close associates.”

Although DHS employees have been directly notified of data breaches, anyone with a reason to believe that their information has been compromised can contact AllClear ID for information protection on credit monitoring and identity.

Reference: cyberscoop

Related coverage

  • Leaked Documents Reveal NVIDIA’s Secret AI Training Practices
  • Unmasked: 16GB “Rocket” Database Leak Exposes The Gentlemen Ransomware Cartel
  • JavaScript trackers crawl user data, Facebook launches investigation
  • Cyber Fattah Breach: Pro-Iranian Hackers Leak Saudi Games Athlete Data in Targeted Info Op
  • Privacy Win: Firefox Mandates Clear Data Collection Disclosure for All Extensions

Support Our Threat Intelligence

If you find our CVE report and cybersecurity news helpful, consider supporting our work.

Buy Me a Coffee Logo Buy Me a Coffee PayPal
Crypto QR Code
USDT (TRC20):
TN8BdV8cp4T1Cd28gK9qTAnZknzzuwyUtm
USDT (ERC20):
0x3725e1a7d3bc5765499fa6aaafe307fabcd75bce

Share this article:

Facebook Post LinkedIn Telegram
Written by
@DdoS · Security Researcher

Do Son

Do Son is the Founder and Editor of SecurityOnline.info. Working in cybersecurity since 2013, he reports on vulnerabilities, malware, and emerging threats, providing timely analysis to help organizations and individuals stay ahead of evolving risks.

Tags: Homeland Security

Search

Translation

CVE WATCHTOWER
🚨

Receive alerts for vulnerabilities being exploited in the wild.

⚡

Get notified instantly when a Proof of Concept (PoC) exploit is published.

🔍

Access critical info on vulnerabilities even when marked as "RESERVED".

🧠

Insights powered by decades of expertise and global intelligence sources.

🎯

Customize alerts with up to 10 keywords for your specific tech stack.

📊

Export the raw CVE database for SIEM integration and reporting.

Upgrade Package

🔴 Live Critical Threats

  • CVE-2026-54350CVSS 10.0
    ## Summary `enrichContext` at `packages/server/src/sdk/workspace/queries/queries.ts:121-138` substitutes parameter values into the raw JSON...
  • CVE-2026-52813CVSS 10.0
    ### Summary Organization names containing path traversal sequences (`../`) are accepted by...
  • CVE-2026-52811
    Summary `(*Repository).UploadRepoFiles` checks for symlinks only on the **leaf** of the upload...
  • CVE-2026-52806CVSS 9.9
    # Gogs: RCE via `git rebase --exec` Argument Injection in PR Merge...
  • CVE-2026-56315CVSS 9.8
    picklescan before 1.0.4 fails to block at least seven Python standard library...
  • CVE-2026-56274CVSS 9.9
    Flowise before 3.1.2 contains multiple OS command injection vulnerabilities in the Custom...
  • CVE-2026-11374CVSS 9.0
    In ManageEngine ADSelfService Plus, RecoveryManager Plus, M365 Manager Plus, and ADAudit Plus,...
  • CVE-2026-12866CVSS 9.8
    All versions of the package expr-eval are vulnerable to Code Execution via...
  • CVE-2026-54352CVSS 9.6
    ## Summary `POST /api/pwa/process-zip` at `packages/server/src/api/routes/static.ts:24` accepts a builder-uploaded `.zip`, extracts it...
  • CVE-2026-48746CVSS 9.1
    vLLM is an inference and serving engine for large language models (LLMs)....
Powered by CVE WATCHTOWER

🚨 Active Exploits in the Wild

  • CVE-2026-20230CVSS 8.6
    A vulnerability in Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Management Edition (Unified...
  • CVE-2026-4020CVSS 7.5
    The Gravity SMTP plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and...
  • CVE-2026-10735
    Multiple plugins by ShapedPlugin contain a backdoor in various versions. This makes it possible for unauthenticated attackers to...
  • CVE-2026-20262CVSS 6.5
    A vulnerability in the web UI of Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, could allow an authenticated,...
  • CVE-2026-54420CVSS 8.5
    LiteSpeed cPanel plugin before 2.4.8 (as distributed in LiteSpeed WHM PlugIn before 5.3.2.0) mishandles symlinks provided by a...
  • CVE-2026-53435CVSS 8.8
    In Jenkins 2.567 and earlier, LTS 2.555.2 and earlier, it is possible for attackers to have Jenkins deserialize...
  • CVE-2026-10795CVSS 8.1
    The UpdraftPlus: WP Backup & Migration Plugin plugin for WordPress is vulnerable to Authentication Bypass in all versions...
  • CVE-2026-11645
    Out of bounds read and write in V8 in Google Chrome prior to 149.0.7827.103 allowed a remote attacker...
  • CVE-2026-50751CVSS 9.3
    A logic flow weakness in Remote Access and Mobile Access certificate validation in deprecated IKEv1 key exchange allows...
  • CVE-2026-20245CVSS 7.8
    A vulnerability in the CLI of Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, could allow an authenticated, local...
Powered by CVE Watchtower

Our Websites
  • Penetration Testing Tools
  • The Daily Information Technology
  • Daily CyberSecurity

    • About SecurityOnline.info
    • Advertise with us
    • Announcement
    • Contact
    • Contributor Register
    • Login
    • About SecurityOnline.info
    • Advertise on SecurityOnline.info
    • Contact Us

    When you purchase through links on our site, we may earn an affiliate commission. Here’s how it works

    • Disclaimer
    • Privacy Policy
    • DMCA NOTICE
    • Linkedin
    • Twitter
    • Facebook
    • Youtube
    © 2017 - 2026 Daily CyberSecurity. All Rights Reserved.