Forty thousand DHS employees leaked, and the right isn't covering it
A hacker stole personal records on more than 40,000 Department of Homeland Security employees, including ICE and CBP agents, and a group called the Department of Peace passed them to the leak collective Distributed Denial of Secrets, which published them Wednesday. This is the third government data disclosure in a month, per the Guardian. Four outlets covered it. None of them lean right. The absence is the story: an administration that has made DHS central to its political identity has a major security breach, and the outlets most invested in that identity aren't saying so.
DHS employee data of 40,000+ workers leaked in major hack
4 sources · hover a dot to see coverage
What happened
On Wednesday, October 28, the leak collective Distributed Denial of Secrets (DDoSecrets) published records on more than 40,000 Department of Homeland Security employees. The data, which originated with a group calling itself the Department of Peace, includes names, job titles, phone numbers, email addresses, and office locations. Some of those employees work in intelligence roles. The BBC put the count at 41,000; other outlets used 40,000-plus. The Guardian identified this as the third government data disclosure in the past month. The Verge specified that the breach covers ICE and CBP personnel, making the exposure particularly sensitive given that those agencies operate in enforcement roles where agent identity carries safety implications. That is the wire version. Four outlets have it. What separates the coverage is who chose not to show up.
The Verge named the agencies; everyone else stayed generic
The Verge was the only outlet to specify that the leaked records belong to ICE and CBP personnel specifically, not just generic DHS employees. That distinction matters: ICE and CBP agents work enforcement operations where exposed identities create real personal risk. The Guardian and The Hill both described the breach in department-wide terms without naming those agencies. The BBC led with 'immigration agents' in its headline but attributed the release to 'a group called the Department of Peace' without noting DDoSecrets' role as the publishing intermediary, which is the detail that connects this leak to the two prior government disclosures the Guardian flagged.
Right-leaning outlets that cover DHS daily published nothing
Fox News, Breitbart, the Washington Examiner, the New York Post, and the Daily Wire were not in this story's coverage. These outlets have run extensive coverage of DHS, ICE, and CBP operations as signature political terrain. A breach exposing 40,000 employees of those same agencies, including intelligence staff, did not appear in their coverage on the day of publication. The gap is not ideological interpretation. It is absence.
What one side told you that the other didn't
Right-leaning outlets that cover ICE daily published nothing.
Fox News, the Washington Examiner, Breitbart, and the New York Post have collectively published hundreds of pieces on ICE and CBP operations in 2025 and 2026. A breach exposing the names, phone numbers, and office locations of more than 40,000 DHS employees, including ICE and CBP agents in intelligence roles, did not appear in any of their coverage on October 28. The story that lands hardest on an administration's signature agency got covered only by outlets left of center. That is a checkable, directional asymmetry.
This is the third government leak in a month. One outlet said so.
The Guardian noted that Wednesday's release is the third government data disclosure in the past month. The Hill, the BBC, and The Verge treated the story as a standalone event with no prior context. If DDoSecrets is on a run of government leaks, the pattern is the news. Three outlets missed it, or chose not to establish it. A reader who saw only one of those three pieces has no way to know this breach is part of a sequence.
The publisher and the hacker are two different actors. Most coverage collapsed them.
The Verge and The Hill correctly distinguished between the hacker who stole the data and DDoSecrets, which published it. The BBC attributed the release solely to 'a group called the Department of Peace' without naming DDoSecrets at all. The Guardian named DDoSecrets in the headline but described it as a 'leak website' rather than identifying the separate hacking group. The chain of custody matters legally and editorially: who stole it, who held it, and who published it are three different accountability questions, and only one outlet's framing kept all three visible.
What to watch
DDoSecrets has now released three government datasets in a month. If a fourth release drops before November 15, watch whether right-leaning outlets continue to pass on coverage or whether the volume forces a response. A fourth breach in five weeks would be difficult to frame as a one-off, and the outlets currently silent would face a harder editorial calculation about whether to keep ignoring a pattern that directly involves agencies they cover as a primary beat.
See how outlets across the political spectrum framed this differently — and what each side left out.