DHS HSIN Hacked: Unclassified Intel Spill hits World Cup Security Ops

DHS's Homeland Security Information Network (HSIN) — the same platform used to manage the response to the Washington D.C. mid-air collision that killed 67 people — was breached in late May and early June. The hackers got inside the servers at a moment when HSIN is actively supporting security for the World Cup games being played across the United States.

Unclassified but Highly Sensitive: The Real Risk

Senator Mark Warner (D-VA), ranking member of the Senate Intelligence Committee, put it bluntly: the information on HSIN is unclassified but "highly sensitive, and its exposure risks national security." Nextgov and Bleeping Computer first reported the incident. DHS confirmed "a recent cyber incident involving a specific, unclassified legacy information sharing environment" but refused to say what data was stolen or how much. A 2023 security lapse already revealed that HSIN contained personal information from law enforcement surveillance of Americans.

A Pattern of Federal Cybersecurity Failures

This breach doesn't exist in isolation. Since the Trump administration took office in January 2025, the federal government has suffered at least four major cybersecurity incidents: classified war plans shared over Signal (an app not cleared for government use), DOGE operatives raiding federal databases of Americans' personal data, a CISA contractor publicly spilling passwords and credentials that exposed access to government cloud systems, and the FBI declaring a "major cyber incident" after exposing phone numbers of surveillance targets. HSIN is just the latest hole in a heavily perforated hull.

What This Means for World Cup Security and Beyond

We don't know who the hackers are or what they took. But DHS built HSIN to let federal, state, and local law enforcement share intelligence about major events and emergencies in real time. The World Cup is the biggest event on U.S. soil this year. If the attackers have access to the intelligence shared among agencies coordinating security for those games, that's not a theoretical risk — it's an active operational leak. Every agency that relied on HSIN now has to assume its data is burned.

If DHS can't secure the platform supporting World Cup security, every agency should treat their "unclassified but sensitive" systems as already compromised — and start assuming the data on them is being harvested in real time.

Source: US government says it got hacked - again
Domain: techcrunch.com