Leaked Files Reveal ICE Liaisons to U.S. Military Commands With Access to Surveillance Tech
Leaked Department of Homeland Security files indicate that U.S. Immigration and Customs Enforcement maintains liaison positions within several major U.S. military commands, including Special Operations Command, Africa Command, and Southern Command. These liaisons reportedly possess access to advanced surveillance tools such as PenLink, Falcon, and RavenGo, which allow for the tracking of mobile devices and the aggregation of commercial and government data. A hacker group known as the Department of Peace published the personnel data on the Distributed Denial of Secrets platform, prompting DHS to acknowledge a potential breach and demand the removal of the searchable database. The leaked records identify specific roles, such as a Combatant Command Program Manager and a Senior Liaison, while also linking some staff to the Liberty Crossing facility associated with the Office of the Director of National Intelligence. Additionally, the files detail a contractor role at the National Targeting Center under U.S. Central Command, highlighting a broader integration between immigration enforcement and military targeting infrastructure.
Go to the primary sources (11)
The official sources this coverage is built on. Read them directly to bypass framing.
A hacker using the alias 'Department of Peace' has released personal data for over 40,000 U.S. Department of Homeland Security employees, including names, contact information, and workplace locations for ICE agents, CBP officers, and cybersecurity staff. TechCrunch reported that the breach likely occurred in mid-August via an Okta single sign-on system, though Okta disputes being the source of the leak. The exposed records represent approximately one-fifth of the DHS workforce, with the majority belonging to Customs and Border Protection and Immigration and Customs Enforcement units. This incident marks the second major data breach involving DHS this year, following a previous theft of contractor agreements, and coincides with broader federal data compromises affecting the FBI and Department of Defense. A DHS spokesperson stated they are actively addressing the threat to protect their employees, while the hacker justified the release by claiming reciprocity since the government holds similar data on citizens.
Bias read (Center): The article presents a straightforward account of a cybercrime event, focusing on technical details of the breach, the specific departments affected, and official responses. While the subject involves sensitive government agencies like ICE and CBP, the tone remains factual and neutral, citing both a
Why factuality (85): Accurately reflects the primary source regarding the breach size, specific agency breakdowns, and the hacker's stated motive. However, it adds the phrase 'exposing... to potential harassment and violence,' which is an interpretive inference rather than a direct factual claim from the source text.
Why objectivity (70): Uses somewhat alarmist phrasing ('potential harassment and violence') in the opening sentence, which leans toward sensationalism compared to the neutral reporting in the source material.
Fox News (US)IndependentConservativeFactual 75Objective 60
The U.S. Department of Homeland Security (DHS) is investigating a significant data breach that allegedly exposed personal information, including names, titles, locations, and contact details, for approximately 40,000 employees and contractors. The affected individuals include roughly 10,000 personnel from Immigration and Customs Enforcement (ICE) and over 20,000 from U.S. Customs and Border Protection (CBP). An anti-fascist hacking group known as the 'Department of Peace' claimed responsibility for the theft, stating that the release was intended to hold DHS accountable for its actions. The data was published on the website Distributed Denial of Secrets, where a search tool allows the public to access the records. DHS officials confirmed they are aware of the incident and are taking steps to protect their staff, while noting that the leak includes sensitive information such as the identities of undercover agents.
Bias read (Conservative): The article frames the data breach primarily through the lens of national security risks and the safety of law enforcement officers, using terms like 'catastrophic' and highlighting the exposure of undercover agents. It emphasizes the hostile intent of the hacker group, describing them as 'anti-fasc
Why factuality (75): Correctly identifies the core facts of the breach and the number of affected employees. However, it attributes the term 'catastrophic' to unnamed sources, which is not supported by the primary source text, and mentions 'undercover ICE agents' which is a specific detail not explicitly detailed in the
Why objectivity (60): Includes unrelated headlines about political attacks on sanctuary cities and police protections, which introduces a partisan political frame and distracts from the objective reporting of the data breach itself.
Leaked Department of Homeland Security files indicate that U.S. Immigration and Customs Enforcement maintains liaison positions within several major U.S. military commands, including Special Operations Command, Africa Command, and Southern Command. These liaisons reportedly possess access to advanced surveillance tools such as PenLink, Falcon, and RavenGo, which allow for the tracking of mobile devices and the aggregation of commercial and government data. A hacker group known as the Department of Peace published the personnel data on the Distributed Denial of Secrets platform, prompting DHS to acknowledge a potential breach and demand the removal of the searchable database. The leaked records identify specific roles, such as a Combatant Command Program Manager and a Senior Liaison, while also linking some staff to the Liberty Crossing facility associated with the Office of the Director of National Intelligence. Additionally, the files detail a contractor role at the National Targeting Center under U.S. Central Command, highlighting a broader integration between immigration enforcement and military targeting infrastructure.
Bias read (Progressive): The article frames the revelation through a critical lens regarding civil liberties and state power, emphasizing the 'massive' nature of the leak and the intrusive capabilities of the surveillance technologies. By highlighting the connection to intelligence agencies and the use of tools like PenLink
Why factuality (60): Introduces highly specific claims about military liaisons (SOCOM, AFRICOM) and specific surveillance tools (Penlink, Falcon) that are not present in the provided primary source document. While these details might exist in the full dataset, they cannot be verified against the provided ground truth, m
Why objectivity (50): Frames the story entirely through the lens of national security overreach and surveillance capabilities, ignoring the broader context of the general personnel data breach mentioned in the source. This creates a narrow, critical perspective on the agency.
The fan-fiction platform Archive of Our Own (AO3) announced it would remain offline for an estimated two to four weeks following a detected security incident. Initially attributed to routine maintenance, the prolonged outage prompted the parent organization, the nonprofit Organization for Transformative Works (OTW), to release a formal statement confirming the breach. While OTW stated that there is no current evidence indicating the user database was stolen, they acknowledged the possibility cannot be ruled out, noting that the database contains usernames, emails, IP addresses, and hashed passwords. As a precautionary measure, users were advised to change passwords on other platforms if credentials were reused. Although recent critical vulnerabilities in the PHP programming language sparked speculation about the cause, the article clarifies that AO3 operates on the Ruby on Rails framework, making a connection to those specific flaws unlikely.
Bias read (Center): The article covers a cybersecurity incident affecting a technology platform. This is an apolitical subject matter focused on IT infrastructure, data privacy, and corporate communication rather than government policy, partisan politics, or ideological debates. The tone is factual and informative, and
Why factuality (0): Completely irrelevant to the primary source document. The article discusses a security incident at the fan-fiction site Archive of Our Own (AO3), whereas the source describes a data breach at the Department of Homeland Security.
Why objectivity (0): Not applicable as the content does not match the subject matter of the evaluation set.
Web hosting provider DreamHost confirmed that hackers accessed customer email accounts and credentials during a cyberattack that lasted several months. The incident, which began in August, involved the exploitation of an unspecified vulnerability in the company's file manager to steal session tokens. DreamHost publicly disclosed the breach after it caused a multi-day service outage, prompting the company to reset certain customer passwords. In a report filed with the California Attorney General, the firm stated that fewer than 10 percent of its approximately 400,000 paying customers were affected, though it refused to provide exact numbers. When contacted by TechCrunch, a DreamHost representative declined to explain why the intrusion went undetected until late October, citing an active internal investigation.
Bias read (Center): The article presents a straightforward cybersecurity incident using neutral language and relies exclusively on official disclosures and corporate statements without injecting political commentary or partisan framing.
Applebee’s resolved a critical security vulnerability where a database password was accidentally hardcoded into its Android mobile application. Cybersecurity researcher Robert Wiggins identified the flaw using AI tools, allowing him to access a database containing sensitive personal information for over 8.5 million loyalty program members. Exposed data included names, email addresses, dates of birth, phone numbers, ZIP codes, veteran status, login history, and IP addresses. Although the company stated it found no evidence of unauthorized access, a spokesperson declined to confirm whether server logs exist to verify this claim. TechCrunch independently verified the breach by decompiling the app and retrieving test account data before the fix was implemented.
Bias read (Center): The article maintains a neutral, technical tone focused on verifying the security flaw and presenting factual details without editorializing or taking a political stance.
A recent cybersecurity breach in Denmark exposed the personal data of approximately 8.8 million individuals via the national Central Register of Persons. The intrusion reportedly occurred because a third-party vendor used the weak password '123456,' allowing attackers to harvest records over ten days. Danish authorities are currently reviewing security protocols and investigating potential vulnerabilities in other public IT systems. The article contextualizes this event within broader debates about digital identification, noting that the U.S. is considering stricter ID laws like the SAVE America Act. It argues that centralized national ID systems create significant security risks, citing past U.S. breaches involving the Office of Personnel Management and the IRS as evidence that such databases remain vulnerable despite increased scrutiny.
Bias read (Conservative): Framing emphasizes government incompetence ('crappiest conceivable password', 'screwups') and uses libertarian terminology ('government overreach', 'liberty') to argue against centralized ID mandates.
How each side covered it
The same event, grouped by the political lean of the outlets covering it.
progressive
center
conservative
★
How each side covered it
Support independent, bias-aware news and unlock the social pulse, community voting, and every other Supporter feature.
United States
