A hacker stole more than 40,000 DHS employee records
A hacker stole more than 40,000 DHS employee records. The names, job titles, phone numbers, and emails of thousands of ICE, CBP, and other DHS employees were compromised in a massive hack.
一名黑客窃取了超过 40,000 名美国国土安全部(DHS)员工的记录。数千名美国移民及海关执法局(ICE)、美国海关及边境保卫局(CBP)以及其他国土安全部员工的姓名、职称、电话号码和电子邮件在一次大规模黑客攻击中泄露。
A hacker stole a trove of personal information from the Department of Homeland Security (DHS). The breach exposes the names, job titles, phone numbers, email addresses, and office locations of more than 41,000 employees, including those in US Immigration and Customs Enforcement (ICE) and Customs and Border Protection (CBP), according to TechCrunch and Wired. The data also linked the agencies to specific surveillance tools.
据 TechCrunch 和《连线》杂志报道,一名黑客从美国国土安全部窃取了大量个人信息。此次泄露事件暴露了超过 41,000 名员工的姓名、职称、电话号码、电子邮件地址和办公地点,其中包括美国移民及海关执法局和美国海关及边境保卫局的员工。这些数据还将相关机构与特定的监控工具联系了起来。
As reported by TechCrunch, a hacker known as “Department of Peace” gained access to the data through Okta, an identity and access management service used by the DHS. Around 21,000 records pertain to CBP employees, and nearly 7,000 belong to staff at ICE. The data also includes records from the Cybersecurity and Infrastructure Security Agency (CISA), US Citizenship and Immigration Services (USCIS), and Homeland Security Investigations (HSI).
据 TechCrunch 报道,一名自称“和平部”(Department of Peace)的黑客通过国土安全部使用的身份与访问管理服务 Okta 获取了这些数据。其中约 21,000 条记录属于海关及边境保卫局员工,近 7,000 条属于移民及海关执法局员工。数据还包括来自网络安全与基础设施安全局(CISA)、美国公民及移民服务局(USCIS)以及国土安全调查局(HSI)的记录。
The DHS has worked to conceal the identities of CBP and ICE agents, who have carried out anti-immigration raids around the US, while also tracking down online critics. “They have our information, so it’s only fair that we have theirs,” the “Department of Peace” hacker said, according to TechCrunch. This leak comes just weeks after hackers stole data from the FBI on its employees and job applicants.
国土安全部一直致力于隐瞒海关及边境保卫局和移民及海关执法局特工的身份,这些特工曾在全美范围内执行反移民突袭行动,并追踪在线批评者。据 TechCrunch 报道,“和平部”黑客表示:“他们掌握了我们的信息,所以我们掌握他们的信息也是公平的。”此次泄露事件发生前几周,黑客刚刚窃取了联邦调查局(FBI)关于其员工和求职者的数据。
The leaked DHS information was reportedly given to cybersecurity researcher maia arson crimew, who shared it with Distributed Denial of Secrets (DDoSecrets), a nonprofit organization that’s now hosting the leaked “Icepick” dataset. The leak also reportedly includes information about DHS groups that have access to tools that can be used for surveillance, such as the facial recognition app Mobile Fortify and PenLink, which can collect and analyze data from phones and online services.
据报道,泄露的国土安全部信息被提供给了网络安全研究员 maia arson crimew,后者将其分享给了非营利组织“分布式拒绝秘密”(DDoSecrets),该组织目前正在托管泄露的“冰镐”(Icepick)数据集。据称,此次泄露还包括有关国土安全部各小组的信息,这些小组可以使用监控工具,例如人脸识别应用 Mobile Fortify 以及可以收集和分析手机及在线服务数据的 PenLink。
The DHS didn’t immediately respond to The Verge’s request for comment.
国土安全部没有立即回应 The Verge 的置评请求。