2026 DHS — Homeland Security Information Network (HSIN) intrusion; World Cup security coordination platform accessed

Verified incident — reported June 30–July 1, 2026. Nextgov/FCW and BleepingComputer reported that an unknown threat actor accessed the Department of Homeland Security's Homeland Security Information Network (HSIN) in recent weeks, potentially exposing sensitive but unclassified data shared among federal, state, local, and industry partners. DHS investigators are probing the intrusion; the actor's affiliation and whether documents were exfiltrated remain unclear. The Office of Intelligence and Analysis conducted a damage assessment; the intrusion is believed to have occurred between late May and early June 2026, targeting HSIN servers and a SharePoint system used for collaboration. HSIN supports real-time communication, document sharing, alerts, web conferencing, and incident management for event security coordination—including during major events such as the 2026 FIFA World Cup hosted across the United States. DHS confirmed to BleepingComputer July 1, 2026 that it is aware of a cyber incident involving a specific unclassified legacy information-sharing environment, isolated affected systems, mitigated vulnerabilities, and launched a forensic investigation, with no indication classified networks were impacted and HSIN remaining operational for partners. Distinct from dhs2026 (March hacktivist ICE contract leak). BreachHistory indexes recordsAffected 0 pending attested scope.