Trump administration attempts to take down leak of ICE personnel data

DHS asked FlokiNET to remove or disable a website containing a “stolen” dataset about more than 40,000 identifiable employees. The department, through cybersecurity firm ZeroFox, said the information could enable harassment, stalking, and physical harm. The request claimed the site violated FlokiNET’s terms of service.

FlokiNET refused because it viewed the information as relevant to public oversight. It argued that federal officers carrying out enforcement programs are not acting as private individuals. The company said people have a legitimate interest in knowing who performs this work, under whose authority, and in which office.

The refusal did not keep the data online permanently at that address. The site’s registrar suspended the domain, and the information moved elsewhere. Other groups also copied or redistributed it, making a complete removal from the internet unlikely. The dispute shows the tension between employee safety and transparency around immigration enforcement.

ICE means Immigration and Customs Enforcement. It is one of the Department of Homeland Security agencies identified in the article. DHS is the federal department that oversees agencies involved in immigration and border enforcement, including ICE and Customs and Border Protection.

The leaked database compiled information about employees from several DHS agencies. ICE received particular attention because its officers have carried out operations connected to President Donald Trump’s mass deportation campaign, which began in 2025. The administration has often declined to identify agents involved in specific operations, citing safety risks.

That structure matters because the dispute is not limited to one agency or one website. The database covered personnel across DHS agencies, while the public debate centers heavily on ICE’s enforcement work. The article describes demands for secrecy, efforts to conceal agents’ identities, and calls from advocates for more transparency about government actions.

The letter from ZeroFox said the dataset placed more than 40,000 identifiable individuals at risk. That figure describes the scale of the people whose information appeared in the material. The article does not provide a more detailed breakdown of the dataset or explain exactly what information each record contained.

FlokiNET said the site compiled information about employees from several DHS agencies. The article specifically names Immigration and Customs Enforcement and Customs and Border Protection. It also refers broadly to other DHS agencies, showing that the database extended beyond ICE alone.

The scale increased the stakes of the takedown request. A list affecting tens of thousands of people could be copied and redistributed quickly. That is what happened after the original publication: other groups placed the information on additional sites, including icepi.cx. The article says the data is therefore unlikely to be entirely scrubbed from the internet.

The most immediate risk is personal danger. ZeroFox’s letter, sent on behalf of DHS, said the information placed more than 40,000 identifiable individuals at risk of harassment, stalking, and physical harm. Those concerns explain why the administration sought to remove the site and has often withheld agents’ identities during operations.

The risk becomes harder to control once data is copied. FlokiNET said the registrar suspended the original domain, but the employee information moved to another domain. Other groups also spread it elsewhere. Each additional copy makes it more difficult for one company or government agency to remove the material completely.

The article does not report specific attacks caused by this database. It does describe broader violence and disputes surrounding immigration operations, including gunfire involving immigration agents and allegations of civil-rights violations. If the information remains online, the central challenge will be balancing the employees’ safety with public demands to know who conducts enforcement and under whose authority.

ZeroFox is the cybersecurity firm that contacted FlokiNET on DHS’s behalf. Its letter accused the site of publishing a stolen employee dataset and requested that the company remove or disable the information. The letter focused on the potential danger to more than 40,000 identifiable people.

FlokiNET is the Icelandic web hosting company involved in the dispute. It said the request concerned icepi.cx and refused to remove the site, arguing that the public has a legitimate interest in knowing who carries out federal enforcement work. The domain’s registrar later suspended it, and the data moved elsewhere.

Distributed Denial of Secrets, or DDoSecrets, first published the database online. The group showcases leaked government data and had previously released information involving Jeffrey Epstein, the Israeli Ministry of Justice, and US police departments. A hacker group calling itself the Department of Peace claimed responsibility for obtaining and sharing the DHS data.

The administration says concealing agents’ identities helps protect them from safety risks. Immigration agents have responded by wearing face masks or street clothes during operations. The article places these measures within a wider effort to keep the identities of agents involved in specific immigration actions from being disclosed.

Human rights groups and immigration advocates see a serious cost in that secrecy. They argue that people have little recourse when they want to challenge allegations of excessive force or impropriety during ICE raids. Without clear information about who carried out an operation, accountability can become more difficult.

The conflict has intensified during Trump’s mass deportation campaign. The article describes allegations including unlawful arrests and racial profiling, along with tactics such as car ramming and tackling. It also reports that at least 25 people faced gunfire from immigration agents since Trump began his second term, with six shootings resulting in deaths. Advocates therefore call for more transparency.

When leaked information concerns public employees, two important interests collide. Employees need protection from harassment, stalking, and physical harm. The public may also want to know who carries out government enforcement, under whose authority, and in which office. FlokiNET used that transparency argument when it refused DHS’s request.

The article gives a related example involving ICEBlock, an app that tracked ICE agents. The Justice Department pressured Apple and other technology companies to remove such apps. Democratic Representative Jamie Raskin argued that government-backed blocking could violate customers’ First Amendment right to record and report government activity.

These principles do not automatically settle whether publishing a leaked dataset is lawful or responsible. The article does not provide a court ruling on this dispute. It shows the practical result instead: the registrar suspended one domain, but copies appeared elsewhere. Future debates will continue to weigh privacy and safety against oversight and free-expression concerns.