
埃森哲的一名承包商因泄露数千名该局工作人员的个人数据而被联邦调查局除名。
An Accenture contractor has been removed from FBI work following a breach that exposed the personal data of thousands of bureau staff.
据路透社报道,联邦调查局周一采取了行动,并援引两名知情人士的话说。
The FBI acted on Monday, Reuters reported, citing two people familiar with the matter.
联邦调查局一名高级官员告诉路透社,一家未透露姓名的承包商尚未对其负责的系统应用安全修复程序(称为补丁)。该局没有透露该公司或平台的姓名,我们也没有独立核实该报道。
A senior FBI official told Reuters that an unnamed contractor had not applied a security fix, known as a patch, to a system in its care. The bureau did not name the company or the platform, and we have not independently verified the report.
“因此,联邦调查局已经取消了承包商,并采取了一切必要措施,以减轻任何进一步的风险和保护我们的劳动力,”这位官员告诉路透社。
“As such, the FBI has removed the contractor and taken all necessary steps to both mitigate any further risk and protect our workforce,” the official told Reuters.
路透社的两名消息人士填补了这一空白,称该平台是Oracle PeopleSoft,一个人力资源系统,负责该平台的第三方是埃森哲。
Reuters’ two sources filled in the gaps, saying the platform was Oracle PeopleSoft, a human resources system, and that the third party responsible for it was Accenture.
窃取数据并要求付款的组织ShinyHunters上个月表示,它利用PeopleSoft的一个漏洞侵入了FBI的就业门户网站。
ShinyHunters, a group that steals data and demands payment, said last month that it had used a PeopleSoft flaw to break into the FBI’s jobs portal.
当时,该组织表示,它掌握了几乎所有联邦调查局特工和申请为联邦调查局工作的人的数据。
At the time, the group said it held data on almost all FBI agents and on people who had applied to work for the FBI.
埃森哲告诉路透社,它很自豪能够支持联邦调查局,并将继续这样做。但该公司没有回应有关承包商或缺失补丁的问题。
Accenture told Reuters it was proud to support the FBI and would continue to do so. But the firm did not respond to questions about the contractor or the missed patch.
该组织表示,这次袭击是报复行为,而不是为了赚钱。该公司表示,它针对联邦调查局5月份对其方法提出的建议,并要求联邦调查局纠正该建议,而不是支付赎金。
The group said the attack was an act of revenge, not a bid for money. It said it targeted the FBI over a May advisory about its methods and demanded that the bureau correct the advisory instead of paying a ransom.
与此同时,入境路线仍未得到证实。Help Net Security援引Mandiant的话说,今年早些时候,即5月至6月期间,在Oracle发布修复程序之前,ShinyHunters对主要学术目标使用了一个单独的PeopleSoft漏洞。联邦调查局和路透社都没有透露这里是否使用了同样的缺陷。
Meanwhile, the route in remains unconfirmed. Earlier this year, between May and June, ShinyHunters used a separate PeopleSoft flaw against mostly academic targets before Oracle released a fix, Help Net Security reported, citing Mandiant. Neither the FBI nor Reuters has said whether the same flaw was used here.
据路透社报道,一些前联邦调查局官员称,这次泄密事件是对该局行动安全的重大打击。
Some former FBI officials have described the breach as a major blow to the bureau’s operational security, according to Reuters.
据《黑客新闻》报道,ShinyHunters的两名成员已被捕,而联邦调查局仍在确定损失的程度。
Two members of ShinyHunters have since been arrested, The Hacker News reported, while the FBI is still determining how far the damage goes.