ICE Observers Say DHS Filed Them in a Palantir 'Threat' Database

A Maine resident photographed an ICE arrest in Portland. Months later, according to a recently unsealed proposed class action, an agent identified only as "J.C." entered her into Palantir's Investigative Case Management (ICM) system under the tag "Threat to Law Enforcement, Professional Protestor," ran her license plate through LexisNexis Accurint, and routed her photo into CBP's Mobile Query facial-recognition app.

DHS calls the lawsuit "meritless" and says the conduct was isolated, policy-prohibited, and not unconstitutional retaliation. The denial, and the motion to dismiss DHS filed on September 18, sit in the same court record as the allegations. That record is what makes the case worth reading: it is no longer only a story about a single tag, but about the institutional plumbing around a private platform that now functions as a government ledger.

The complaint, [Hilton v. Noem](https://www.courtlistener.com/docket/72313728/132/hilton-v-noem/) (2:26-cv-00092-JAW, D. Maine), was filed in February 2026 and kept under seal until a redacted version was released in late September. The named plaintiffs are Elinor Hilton, Colleen Fagan, Polyxenia Pantos, and Carlyn Williams; counsel includes JoAnna Suriani of Protect Democracy. The lawsuit alleges that an agent identified as "J.C." created ICM profiles on six named individuals, while the government counts eight.

Two of the named plaintiffs, filmed in a parking lot during an enforcement action, were entered as "Threat to Law Enforcement, Professional Protestor." The complaint's other allegations describe a tool stack rather than a single database: CBP's Mobile Query for facial recognition against observer photos, and LexisNexis Accurint for a license-plate lookup of a plaintiff who documented an arrest. One plaintiff says she has been required to undergo secondary inspection every time she crosses the border, an arrangement she expects to continue at least through January 2027. Another says an agent warned her spouse that people who "do anything like that in the future... might get added to a domestic terrorism watchlist." None of those claims has been adjudicated.

The platform underneath the allegations is Palantir's Investigative Case Management system, a case-management tool DHS has used since at least the mid-2010s. Its authorized scope is documented in the 2016 DHS Privacy Impact Assessment for ICE ICM, which describes the platform as an investigative case file rather than a watchlist. The PIA does not contemplate recording First Amendment observers, and it does not authorize tagging members of the public as professional protestors. The complaint's allegations, if accurate, would describe a use of ICM that the 2016 PIA does not cover.

That gap is the mechanism the lawsuit puts under a spotlight. ICM is a private platform sold to a federal agency and shared with state and local partners. It stores case files, biographical data, and intelligence leads. When an agent creates a profile on a U.S. person who has not been arrested or charged, three things happen in the same record: the person is written into a system other agencies can search, the person is labeled with a threat taxonomy, and the person has no practical way to see the entry, contest it, or learn who else has accessed it. The complaint asks for injunctive relief and damages; a separate motion for a preliminary injunction is pending on the docket.

The government's posture, set out in the September 18 motion to dismiss, is that the conduct was isolated, that the agents acted outside policy, and that the plaintiffs cannot show the retaliatory animus First Amendment retaliation doctrine requires. The motion does not deny the existence of the ICM profiles. It argues, in effect, that a few bad entries do not make a policy.

That is the part the case now turns on. A 2016 PIA documents a narrower intended use than the unsealed complaint describes. A motion to dismiss argues the conduct was rogue. A pending preliminary-injunction motion asks the court to require DHS to notify affected observers and audit further tag creation. The docket, more than the headline, is where the audit question lives: who inside DHS reviews new ICM entries on U.S. persons, who outside DHS can see that log, and what happens when an agent writes a U.S. person into a private platform that other agencies, and other states, can search.

Palantir did not respond to Wired's request for comment at the time of filing, and the company has not, as of the latest reporting, made a public statement on the allegations. Silence is not an admission; it is the absence of a record.

The next live event is the court's ruling on the preliminary-injunction motion. The audit question will not be settled in that ruling. It will be the next thing the docket asks the parties to brief.