据报道，联邦调查局（FBI）已通知其特工和支持人员：他们的个人信息在最近一次针对该机构招聘门户网站的网络攻击中遭到泄露。这是FBI首次正式承认其特工的个人信息确实被黑客窃取。除了上周发布的一份声明外，FBI尚未公开承认此次数据泄露事件。在上周的声明中，FBI仅表示已知有黑客组织声称发动了此次攻击，但数据是否真的被窃取仍“尚未确定”。据MS NOW记者肯·迪拉尼（Ken Dilanian）周末的报道，FBI已在内部通知中正式将此次事件定性为“网络安全事件”，并告知员工他们的姓名、地址、职位以及社会保障号码已被泄露。
The Federal Bureau of Investigation has reportedly told its agents and support staff that their personal information was stolen in a recent cyberattack that targeted the bureau’s job application portal. It’s the bureau’s first acknowledgement that the personal information of FBI agents was taken in the breach. The FBI has not publicly confirmed a breach beyond a statement last week, in which it said it was aware that a hacking group had claimed a cyberattack, but that the theft of data was “still undetermined.” As reported by MS NOW reporter Ken Dilanian over the weekend, the FBI has since declared a “cyber security incident” in an internal notification to staff, telling employees that their names, addresses, job titles, and their Social Security numbers were exposed.
最新消息：FBI在内部通知中宣布，此次黑客攻击属于“网络安全事件”，涉及特工的个人身份信息（包括社会保障号码、地址和职位等）。多家媒体随后证实，被窃取的数据中还包括医疗信息，例如血液和尿液样本的检测记录以及心理评估报告。黑客组织“ShinyHunters”此前曾向TechCrunch表示，他们掌握了“几乎所有FBI特工的个人信息”，以及通过FBIJobs.gov门户网站申请职位的求职者的“大量”资料。黑客们利用Oracle PeopleSoft服务器中的安全漏洞入侵了该系统；该服务器存储了大量关于特工及现任员工的个人信息。
New: The FBI told employees in an internal notification that it has declared a “cyber security incident” related to the hack of the portal. Personally identifiable information of FBI employees, including social security numbers, addresses and job titles,…September 26, 2026 Several media outlets have since confirmed that some of the stolen data included medical information, such as records relating to blood and urine samples as well as psychiatric reports The hacking group called ShinyHunters previously told TechCrunch that they “have data on mostly all of FBI,” and a “substantial” amount of information on applicants who applied through the FBIJobs.gov portal. The hackers broke in by exploiting a vulnerability in an Oracle PeopleSoft server, which hosts reams of human resources information on agents and now-employees who applied through the portal.
黑客们向TechCrunch透露，他们并不寻求经济赔偿，而是要求FBI纠正一份此前发布的报告——该报告歪曲了他们的行为。
The hackers told TechCrunch that they are not seeking a financial ransom, but are demanding the correction of an earlier FBI-issued report, which they say misrepresents their activities.
国家安全专家贾斯汀·谢尔曼（Justin Sherman）在《Lawfare》杂志的一篇博客文章中称，这次数据泄露事件对美国政府来说是一场“反情报灾难”。他警告称，此次数据被盗用将使数千名FBI工作人员面临身份信息被泄露、网络钓鱼攻击、外国情报机构的监视等风险。虽然FBI已经通知了内部员工，但尚不清楚该机构是否已向负责监督FBI的国会议员们报告了这一事件。根据联邦法律，当数据泄露事件达到“重大事件”的标准时（例如，如果泄露的信息包含可能对美国国家安全造成实质性危害的个人信息），FBI有义务向国会报告。
Justin Sherman, a national security expert, called the data breach a “counterintelligence disaster” for the U.S. government in a blog post for Lawfare He warned that the data theft would “expose thousands of FBI personnel to profiling, phishing, foreign intelligence approaches, and much more.” While the bureau has notified employees, it’s less clear if the FBI has disclosed the incident to lawmakers in Congress who have oversight of the FBI. Under federal law alerting Congress is required when an intrusion meets the bar of a “major incident” — such as if a data breach involves the theft of personally identifiable information that is “likely to result in demonstrable harm” to U.S. national security.
目前，FBI的律师们可能正在评估是否需要向国会披露这一事件。如果确实需要报告，这将是FBI今年第二次就数据泄露问题向国会通报情况——此前，疑似来自中国的黑客曾入侵FBI的监控系统，导致FBI的监控对象和调查目标的信息被泄露。
It’s likely that bureau lawyers are trying to figure that out right now. If a disclosure is required, it would be the FBI’s second known notification to lawmakers this year about a data breach, after hackers, suspected to be Chinese, broke into a surveillance system that exposed targets of FBI surveillance and investigations earlier this year.
FBI的发言人没有回应TechCrunch的采访请求；白宫发言人也没有回复关于FBI是否已宣布该事件为“重大事件”的电子邮件。几位负责监督FBI工作的国会议员的代表也没有立即给出任何答复。
A spokesperson for the FBI did not respond to TechCrunch’s request for comment on Monday, and a White House spokesperson also did not respond to an email asking if the bureau had declared a major incident. Representatives for several lawmakers whose jurisdictions cover oversight of the FBI did not have any immediate answers.
据ABC News报道，自2017年以来，FBI的官方网站一直是申请在该机构工作的唯一途径。截至本文发布时，该网站仍处于关闭状态。
ABC News reports that the FBI’s job site has been the primary way to apply for a job with the bureau since 2017. The portal remains down at the time of publication.