Cybercrime

DHS Probes Cyberattack on Sensitive Info Network

Was the HSIN breach caused by dangerously outdated federal networks or by DOGE gutting CISA's cyber defenses?

Published JUL 3

DHS Probes Cyberattack on Sensitive Info Network

Story

Above: A Department of Homeland Security (DHS) building and U.S. Citizenship and Immigration Services (USCIS) field office in Tukwila, Washington, on March 3, 2020. Image credit: Jason Redmond/AFP/Getty Images

The Facts

The Department of Homeland Security (DHS) confirmed it is investigating a cyberattack on the Homeland Security Information Network (HSIN), a platform used to share sensitive but unclassified data among federal, state, local and private-sector partners. The breach is believed to have occurred between late May and early June.
International Business Times
Nextgov.com
DHS said it "immediately took action to isolate the affected systems, mitigate the vulnerability, and launch a comprehensive forensic investigation," adding that classified networks were not affected. The identity of the threat actor and whether any data was stolen remain unknown.
The Epoch Times
Bleeping Computer
Hackers targeted both HSIN servers and a SharePoint system used for document collaboration. The breach occurred as the U.S. is hosting FIFA World Cup matches, raising concerns about potential exposure of event security planning and interagency coordination.
Tech Times
Nextgov.com
Sen. Mark Warner, (D-Va.) the top Democrat on the Senate Intelligence Committee, called on DHS and the Justice Department to investigate the breach. Warner said the information in HSIN, "while not classified, is highly sensitive, and its exposure risks national security."
Mark Warner
Reuters
Warner noted HSIN was used to coordinate the response to the January 2025 mid-air collision of an American Airlines flight and a U.S. Army Black Hawk helicopter, and is currently supporting security for the FIFA World Cup and other major events.
TechCrunch
Mark Warner
HSIN previously experienced a security incident in 2023, when a contractor's coding error set access permissions to "everyone" rather than a restricted group, exposing sensitive U.S. person data and other personally identifiable information to unauthorized users within the platform.
International Business Times
PYMNTS

Sources Split

LEFT

CENTER

RIGHT

ESTAB
CRIT

CENTER

PRO
ESTAB

The Spin

Republican narrative

The administration released a comprehensive cyber strategy in March committing to zero-trust architecture and federal network modernization — three months before the breach. The affected system was a two-decade-old legacy platform that was already vulnerable. Classified networks were untouched and HSIN remained operational throughout, with real investments on the way.

Cyber Defense Magazine

Inside Privacy

Democratic narrative

The HSIN hack didn't happen in a vacuum — DOGE gutted the cyber workforce right before it, cutting funding and sidelining the very experts who defend federal networks. Slashing $10 million from state and local cybersecurity support while adversaries are actively probing government systems is reckless. Dismantling the frontline defense and then acting surprised by a breach is sheer negligence.