The search tool for a database of more than 41,000 Department of Homeland Security employees and contractors published by hacktivist transparency group DDoSecrets went offline and returned on a new registrar this week, after DHS contractor ZeroFox sought its removal. Icelandic host FlokiNET said it refused a ZeroFox request to remove the data — which it argued mislabelled the archive as doxxing — and that registrar CentralNic instead placed the icepi.cx domain on serverHold; the site was back online under a different registrar by Thursday. Bluesky has been blocking links to the archive, and DHS said late Wednesday it is "aware of a potential breach" and working to protect employees. CyberScoop verified numerous current CISA employees are listed in the data, which hacktivists said came from an Okta single sign-on service used at DHS; Okta said it has no evidence its systems were compromised.

• Source article