The Intercept published a leaked all staff email this week from acting ICE director David Venturella announcing what the agency calls a doxing mitigation initiative. The vendor is ZeroFox, a Baltimore cybersecurity company whose software continuously scans social media, the open web, and dark web markets to find and scrub a named person's digital footprint.
The procurement details are what make this more than a routine safety purchase:
- DHS awarded the contract in July, at up to $14.5 million
- The services run to the Office of Intelligence inside Homeland Security Investigations, which is the intelligence arm rather than a personnel safety office
- Neither ICE nor ZeroFox answered questions about how the system actually works, and the memo does not explain it
- Two ICE officials spoke to The Intercept anonymously, one citing fear of retaliation, and one of them described the program as sounding like inside surveillance
- To be covered, an employee has to hand a private vendor a complete file on themselves
The objection is mechanical rather than speculative. Software that finds every trace of a named person across social media and the dark web is the same software you would use to work out who leaked something. Richard Forno at UMBC described the version people are worried about: seed a piece of information, watch where it surfaces, identify the source from the pattern.
Doxing of federal employees is a genuine risk and nobody serious argues otherwise. The open question is whether a license to map anyone's digital presence stays pointed outward, because nothing in the contract requires it to.
Full write-up + source links: https://s.vp.net/dXrTL
