US Government Demands Takedown of ICE Employee Data Leak, Citing Safety Risks

The United States Department of Homeland Security (DHS) has formally requested that an Icelandic web hosting company, FlokiNET, remove a website containing sensitive information on tens of thousands of its employees. The request was delivered via a letter from cybersecurity firm ZeroFox, acting on behalf of DHS, accusing FlokiNET of violating its terms of service by publishing a "stolen" employee dataset. The letter stated that the exposed data, which includes information on over 40,000 identifiable individuals, puts them at risk of harassment, stalking, and physical harm.

FlokiNET confirmed that the letter pertained to the domain icepi.cx, which had aggregated employee details from various DHS agencies, including Immigration and Customs Enforcement (ICE) and Customs and Border Protection (CBP). These agencies have faced significant public scrutiny following President Donald Trump's mass deportation campaign initiated in 2025. The Trump administration has frequently cited safety concerns as a reason for withholding the identities of DHS agents involved in specific operations.

Despite FlokiNET's initial refusal to comply, the website's registrar ultimately suspended the domain. However, the employee information has since been relocated to a different domain. FlokiNET defended its stance, asserting that federal officers performing enforcement duties are not private individuals during such operations and that the public has a right to know who is conducting this work, under whose authority, and from which office.

The database was initially released on Wednesday by Distributed Denial of Secrets (DDoSecrets), a group known for publishing leaked government data. DDoSecrets has previously released information such as emails from Jeffrey Epstein and data from the Israeli Ministry of Justice. A hacker group identifying as the "Department of Peace" has claimed responsibility for acquiring and disseminating the DHS data. The information has since spread to other platforms, including icepi.cx, making its complete removal from the internet unlikely.

The Trump administration has adopted a stringent approach to online platforms hosting information about ICE employees and other immigration agents. Last year, the US Department of Justice reportedly pressured major tech companies like Apple to remove applications designed to track ICE agents, such as ICEBlock. This action drew criticism from Democrats and free-speech advocates, who argued it infringed upon the public's right to report on government activities. Representative Jamie Raskin voiced concerns that Apple's compliance might violate customers' First Amendment rights to record and report on government actions.

In response to increased scrutiny and safety concerns, immigration agents have implemented measures to obscure their identities during operations, including wearing face masks or civilian clothing. This lack of transparency has drawn criticism from human rights groups and immigration advocates, who contend it limits recourse for addressing allegations of excessive force or misconduct during ICE raids. Since President Trump began his second term, at least 25 individuals have been subjected to gunfire from immigration agents, resulting in six fatalities. Other incidents have involved alleged civil liberties violations, such as unlawful arrests and racial profiling, alongside controversial tactics like car ramming and tackling.