US Department of Homeland Security Investigates Breach of Intelligence Sharing Platform

The Department of Homeland Security is investigating a breach of its platform, which federal, state, and local governments and law enforcement use to share intelligence. A senior lawmaker warned that the information spill could risk national security. News sites Nextgov, which first broke news of the incident, and Bleeping Computer report that DHS officials are probing a cyberattack on its Homeland Security Information Network, or HSIN, which allows government agencies and local officials to plan, coordinate, and share information and intelligence about major events and respond to emergencies.

The hackers reportedly broke into HSIN servers during late May and early June, potentially exposing information shared using the platform, per Nextgov. When reached by email, an unnamed DHS spokesperson said that the department is “aware of a recent cyber incident involving a specific, unclassified legacy information sharing environment.” “We immediately took action to isolate the affected systems, mitigate the vulnerability, and launch a comprehensive forensic investigation,” said the statement. The investigation is ongoing and the spokesperson declined to comment further.

It’s unclear what data was stolen or how much was taken, and Homeland Security did not answer questions about the incident. A previously reported security lapse during 2023 revealed that HSIN contained personal information shared among law enforcement related to the surveillance of Americans. The incident involving HSIN puts fresh scrutiny on the government’s ability to defend the cybersecurity of its own systems, following over a year of deep cuts across the federal government, including Homeland Security and its cybersecurity agency CISA.

While the intelligence shared over HSIN is unclassified, the information “is highly sensitive, and its exposure risks national security,” said Mark Warner, a Democratic senator representing Virginia who also serves as the ranking member of the Senate Intelligence Committee. Warner said that the HSIN platform is supporting the World Cup games currently underway in the United States, and was also used last year to manage the response to the mid-air collision of an American Airlines jetliner and a U.S. Army Black Hawk helicopter over Washington, D.C., which killed 67 people.

The identity, affiliation, and motives of the hackers who targeted HSIN are not known, but the breach marks the latest security lapse to affect the federal government over the past year. Since the Trump administration took office, the federal government has been beset by several major cybersecurity breaches. Why this matters: The breach of the Homeland Security Information Network raises serious concerns about the government's ability to protect its own systems, particularly at a time when cybersecurity threats are increasing.

The incident highlights the need for robust security measures to safeguard sensitive information shared among government agencies, law enforcement, and other stakeholders. The exposure of sensitive information could have far-reaching implications for national security, and lawmakers like Senator Warner are right to sound the alarm. As the investigation continues, it will be crucial to determine the extent of the breach, the motives of the hackers, and the steps needed to prevent similar incidents in the future.