Federal Lawsuit Alleges DHS Logged ICE Observers in Palantir

Department of Homeland Security (DHS) agents compiled surveillance dossiers on civilian observers monitoring Immigration and Customs Enforcement (ICE) operations and logged their records into Palantir’s Investigative Case Management (ICM) database, according to newly unsealed federal court filings in Maine. The records, disclosed in the proposed class-action lawsuit Hilton v. Noem, reveal that federal agents photographed community observers, ran their faces through mobile facial recognition systems, pulled vehicle registrations via commercial aggregators, and designated nonviolent observers as threats to law enforcement within the federal investigative platform. The disclosures expose escalating enterprise governance and civil liberties risks within federal data systems.

Surveillance dossiers logged in federal case management database

The unsealed court filings stem from legal actions brought by civilian observers represented by the non-profit legal group Protect Democracy in the U.S. District Court for the District of Maine. According to reporting by WIRED and subsequent accounts in Gizmodo, the case documents how a federal agent identified in filings as Agent J.C. compiled investigative profiles on individuals observing field enforcement. While the lawsuit originally identified six targeted observers, federal government filings acknowledged creating profiles on eight individuals within Palantir’s ICM system.

Internal agency records cited in the complaint reveal that Agent J.C. tagged two individuals recorded in a parking lot with the formal classification “Threat to Law Enforcement, Professional Protestor.” The filings assert that the individuals were doing nothing more than observing federal agents from a public vantage point. In addition to creating digital profiles, the lawsuit alleges that federal agents engaged in direct intimidation, driving slowly past the personal residences of observers and warning that continued monitoring would lead to placement on domestic terrorism watchlists. One observer was flagged for mandatory secondary inspections at border crossings through at least January 2027.

Cross-agency integration links facial recognition and commercial data

The court records illustrate how federal investigators linked disparate commercial databases, biometric applications, and enterprise investigative software into an integrated surveillance workflow. After photographing individuals monitoring an enforcement operation in Portland, Maine, Agent J.C. transmitted the images to a U.S. Customs and Border Protection (CBP) officer to perform biometric facial identification using an application designated as Mobile Query.

Concurrently, the agent ran observer vehicle license plates through Accurint, an identity and public-records aggregation platform operated by LexisNexis Risk Solutions. The resulting personal information, including home addresses and family relationships, was indexed and archived inside Palantir’s ICM. Homeland Security Investigations (HSI) relies on ICM as its primary repository for active case files, intelligence documentation, and subject records.

Operational context and expanding enterprise procurement

The surveillance of community observers occurred against the backdrop of Operation Catch of the Day, an aggressive statewide immigration enforcement surge initiated by ICE in January 2026. Public scrutiny and civilian observation intensified following the July 2026 shooting death of 25-year-old Johan Sebastián Durán Guerrero by federal immigration agents in Maine, an event documented by The Guardian as a turning point that mobilized statewide community oversight.

The technical infrastructure underpinning these enforcement initiatives represents a major federal investment. Public procurement records on SAM.gov show that Palantir has secured nearly $126 million in federal contract obligations since 2022 to maintain and scale ICM. This total includes a specialized contract modification valued at nearly $30 million dedicated to building ImmigrationOS, an enterprise environment designed to centralize and automate immigration enforcement operations.

For enterprise IT leaders and public-sector administrators, the case highlights the legal liabilities inherent in operating multi-source data aggregation systems without strict query auditing. When enterprise case management platforms ingest data from external biometric tools and commercial brokers, the absence of strict role-based access controls and oversight policies exposes organizations to serious First Amendment litigation and regulatory scrutiny.

What happens next

The Department of Homeland Security has filed a motion to dismiss the lawsuit, asserting that the claims are meritless and denying the existence of any formal domestic terrorist registry targeting observers. Government attorneys argue that the actions cited in the complaint were isolated incidents prohibited by internal DHS policy, maintaining that the agents’ conduct did not constitute unconstitutional retaliation.

The U.S. District Court in Maine will evaluate whether DHS’s enterprise data collection practices infringed upon First Amendment protections. Should the proposed class action proceed to discovery, federal attorneys and Palantir may face court orders to disclose specific ICM system logs, data audit trails, and classification guidelines governing how field agents tag civilians in federal databases. The ruling could establish critical legal precedents governing data retention, biometric searching, and surveillance oversight across all federal IT contracts.