Reykjavik hosting firm resists US request to remove leaked ICE staff data

The US Department of Homeland Security (DHS) has asked Icelandic web hosting company FlokiNET to remove a website containing information on tens of thousands of its employees.

FlokiNET said it received a letter from cybersecurity firm ZeroFox, acting on behalf of DHS, which accused the hosting company of breaching its terms of service by hosting a stolen dataset of employee details. The letter stated that the published material left more than 40,000 identifiable people exposed to risks including harassment, stalking and physical harm, and demanded the content be taken down or disabled.

FlokiNET said the request related to a single domain, icepi.cx, which contained employee information drawn from several DHS agencies, including Immigration and Customs Enforcement (ICE) and Customs and Border Protection (CBP). These agencies have faced heightened public attention since President Donald Trump launched his mass deportation campaign in 2025, with the administration frequently declining to name agents involved in specific enforcement actions for safety reasons.

FlokiNET said it did not comply with the DHS request, but confirmed that the domain's registrar later suspended it independently. The company added that the employee data has since reappeared on a different domain.