Transparency Toolkit launched ICWATCH on May 6, 2015, presenting it at the re:publica conference. The project automatically collected mainly public LinkedIn profiles containing code names associated with U.S. intelligence programs, including MARINA and MAINWAY, and organized them into a searchable database. At launch it contained more than 27,000 profiles; by February 2017, it reportedly tracked more than 100,000 profiles from LinkedIn, Indeed, and other public sources, most belonging to intelligence contractors rather than NSA employees.
The database exposed the privacy and safety risks of aggregating individually public information about people working in a sensitive sector. By mid-May 2015, listed individuals were requesting removal, and the project received death threats; the site also faced distributed-denial-of-service attacks. WikiLeaks began hosting ICWATCH by the end of May 2015. In August 2016, TechCrunch reported that LinkedIn was suing 100 unnamed parties over website scraping and identified ICWATCH as a possible target, although the source does not establish that ICWATCH was a defendant. ICWATCH and related datasets became unavailable on WikiLeaks in November 2022.