据六名现任及前任FBI官员向MS NOW透露，此次FBI计算机系统遭黑客入侵事件导致几乎所有FBI雇员的敏感个人信息泄露，还有数千名参与FBI专项工作组的地方执法官员的信息也未能幸免。
The hack of FBI computer systems exposed sensitive personal information about nearly every FBI employee, as well as thousands of local law-enforcement officials who worked on FBI task forces, six current and former FBI officials told MS NOW.
FBI官员及外部专家称此次安全漏洞是现代史上最严重的反情报灾难之一。他们指出，这一事件引发了关于是否因疏忽大意才导致漏洞产生的质疑。
FBI officials and outside experts are calling the breach one of the worst counterintelligence disasters in modern history. They say it raises questions about whether negligence was a factor in allowing it to happen.
一名负责网络安全工作的FBI特工将此次事件归咎于“无能”。“这个漏洞本应已被修复，但显然他们漏掉了某个修补环节，”该特工在短信中说道，并强调造成这一结果“绝对是无能所致”。他还指出，那些被窃取的敏感员工信息“根本就不该连接到互联网上，它们本应保存在内部系统中，可某个笨蛋却把它们全部转移到了面向互联网的系统里”。
One FBI agent who works on cybersecurity matters chalked the breach up to “incompetence.”“This was a vulnerability that supposedly they thought they patched, but managed to miss one of the ways to patch it,” the agent said in a text message, adding that the cause was “definitely incompetence.”The sensitive employee information that was stolen “should never have been tied to the Internet, either. It belonged on our internal system and some dumbass moved it all” to an internet-facing system, the agent said.
该特工还透露，FBI获取到了黑客们的聊天记录，其中黑客们对能如此轻易获取如此敏感的资料感到难以置信。
The agent added that the FBI obtained chats in which the hackers expressed disbelief that such sensitive information was available to them so easily.
两名要求匿名谈及这一敏感事件的网络安全专家向MS NOW表示，今年6月谷歌的威胁情报专家就曾公开发布过关于黑客所利用的漏洞的警告，FBI随后也采取了措施来加固自身系统。不过，这些专家称，黑客最终还是找到了绕过FBI补丁的方法。
Google’s threat intelligence experts issued a public warning in June about the vulnerability the hackers exploited, and the FBI took steps to shore up its systems, two cyber security experts told MS NOW, speaking on the condition of anonymity to discuss a sensitive matter. But the hackers found a way around the FBI patch, they said.
那位将此次事件归咎于“无能”的FBI网络安全特工说道：“责任在于FBI中负责网络安全的相关人员。”他还补充道：“当然，把那些信息从内部系统转移到互联网上的那个人也难辞其咎。”一名FBI官员向MS NOW表示，此次黑客入侵事件是由于第三方供应商提供的软件存在漏洞所致。对于有关FBI无能的指控，该官员并未作出回应。
“It’s the fault of whoever in the FBI is responsible for our cyber security,” said the FBI cyber security agent who blamed the breach on “incompetence.”The agent added, “But also whoever pushed that information from our internal system to the Internet.”An FBI official told MS NOW that the hack was the result of a vulnerability in software maintained by a third-party vendor. The official didn’t respond to questions about the allegations of FBI incompetence.
网络安全专家称，这个自称“ShinyHunters”的黑客组织——其名称源自一款需要收集稀有珍贵宝可梦的游戏——通过利用甲骨文公司旗下人力资源软件PeopleSoft中一个此前未被发现的漏洞，成功侵入了FBIJobs.gov网站。多位现任及前任官员表示，这些黑客并未侵入FBI的核心调查网络或任何机密系统。不过，他们窃取的信息仍可能造成极其严重的危害。
Cybersecurity experts say the hacking group, which calls itself ShinyHunters — a reference to a game pursuing rare and valuable Pokémon characters — got in through the FBIJobs.gov portal by exploiting a previously unknown vulnerability in Oracle PeopleSoft, the human resources software. The hackers did not penetrate the FBI’s core investigative network or any classified systems, the current and former officials said. Nonetheless, the information they stole could be extremely damaging.
MS NOW获得的FBI内部通知显示，泄露的数据包含大量信息：包括FBI员工的姓名、家庭住址、手机号码、电子邮箱地址及员工编号；此外还有紧急联系人的身份信息，如社会保障号码和个人电子邮箱地址。
An internal FBI message obtained by MS NOW said that the data exposed included names, home addresses, cell phone numbers, FBI email addresses and employee ID numbers, in addition to personal identifying information for emergency contacts, including Social Security numbers and personal email addresses.
据现任及前任官员透露，该黑客组织获取了几乎所有FBI员工的信息，还有8000多名参与FBI特别行动组的州及地方执法人员的资料。一位FBI官员证实这些特别行动组成员也是受害者，并称他们正在陆续收到通知。
The hackers obtained that information for nearly every FBI employee and also for more than 8,000 state and local law enforcement officers who worked on FBI task forces, current and former officials said. The FBI official confirmed that task force officers were victims and said they were being notified.
“ShinyHunters”最初公开了5000条记录样本，但随后又表示不会发布全部数据。即便如此，专家们仍警告称，包括中国和俄罗斯在内的外国敌对势力极有可能正试图窃取这些数据。
ShinyHunters released a sample of 5,000 records but has since said its group does not plan to release the full data set. Still, experts warn that foreign adversaries, including China and Russia, are likely trying to steal it.
战略与国际研究中心的研究人员在本周发布的分析报告中指出：“此次事件不仅会严重损害FBI的声誉，还会对美国的国家安全构成长期威胁。”
“Beyond causing significant reputational damage to the FBI, the incident poses a longer-term national security threat to the United States,” researchers from the Center for Strategic and International Studies think tank said in an analysis released this week.
专家指出，此次数据泄露事件让人联想到2015年中国情报人员对美国人事管理局发动的黑客攻击——那次攻击使中国获得了几乎所有联邦雇员的资料，包括指纹信息以及他们安全许可申请中的高度敏感内容。
Experts say the breach harkens back to the 2015 hack by Chinese intelligence agents of the Office of Personnel Management, an attack that yielded China information on nearly every federal employee, including fingerprints and highly sensitive details from their security clearance applications.
据专家称，从FBI获取的信息理论上能为敌对势力提供一份从事敏感事务的特工与分析师的名单，还可能让外国情报人员借此要挟或策反那些容易受影响的FBI雇员。
The information obtained from the FBI in theory would provide adversaries a roadmap about agents and analysts working on sensitive matters, and could offer opportunities for foreign intelligence officials to blackmail or recruit vulnerable FBI employees, experts say.
在发给员工的通知中，FBI表示将举办题为“信息公开与风险缓解策略”的培训会，并补充道：“这些培训旨在指导全体人员采取预防措施，以降低自身面临的风险。”一位FBI发言人在声明中称：“FBI仍在对近期发生的网络事件展开调查，现已确认该事件系由第三方供应商管理的平台出现故障所致。”
In the employee notifications, the FBI said it would offer sessions titled “Public Disclosures and Mitigation Strategies,” adding: “These briefings provide proactive steps all personnel can take to minimize vulnerabilities.”“The FBI continues to investigate the recent Cyber incident, which we have confirmed involved a failure of a platform managed by a third-party vendor,” an FBI spokesman said in a statement. The post‘Incompetence’: Massive FBI hack hit most employees and extends to local officials MS NOW