华盛顿 — 美联邦调查局对上个月其招聘门户网站遭黑客入侵的内部调查目前已确定，由一家承包商管理该网站的“安全失误”导致了这次数据泄露。网络司助理局长布雷特·利瑟曼（Brett Leatherman）周二在一份声明中表示：“截至目前，我们的调查确定，该事件是由一家第三方组织管理的平台安全失误所致——一名承包商未能实施专门下发以保障该平台安全的安全补丁。”
WASHINGTON — The FBI’s internal review of a hack of its jobs portal last month has so far determined that a “security failure” by a contractor managing the site caused the breach. “To date, our review has determined that the incident occurred as the result of a security failure of a platform managed by a third-party organization — after a contractor failed to implement a security patch explicitly issued to secure the platform,” Cyber Division Assistant Director Brett Leatherman said in a statement Tuesday.
声明称，FBI已移除了该未具名承包商，并采取了一切必要措施以降低进一步风险并保护其员工。“我们将继续追究责任者的法律责任，目前已有多人被逮捕。”
The statement said the FBI has removed the contractor, which it did not identify, “and taken all necessary steps to both mitigate any further risk and protect our workforce. We will continue to bring the responsible parties to justice, with multiple arrests already occurring.”
本月晚些时候发生的FBIJobs.gov门户网站入侵事件，由网络勒索组织“ShinyHunters”声称负责。该团伙的一名代表此前告诉NBC新闻，该团伙利用该招聘门户获取对其他机构程序的访问权限，窃取了2至3TB的文件。NBC新闻无法核实这些说法的真实性。
The hack of the FBIJobs.gov portal took place late last month, and ShinyHunters, a cyber-extortion outfit, claimed credit for it. A representative of the group told NBC News at the time that it used the job portal to gain access to other agency programs, stealing between 2 and 3 terabytes of files. NBC News was not able to verify the extent of the claims.
利瑟曼的声明似乎确认了该机构认为ShinyHunters应对此次入侵负责。他在声明中表示：“FBI将动用所有可用资源对此涉及FBIjobs.gov的网络事件以及网络犯罪团伙ShinyHunters展开彻底调查。”
Leatherman’s statement appeared to confirm that the agency believes ShinyHunters is responsible. “The FBI will aggressively investigate this cyber incident involving FBIjobs.gov and the cyber-criminal group ShinyHunters with all available resources,” his statement said.
FBI局长卡什·帕特尔（Kash Patel）上周在社交媒体上宣布，该团伙的一名成员已被逮捕，但他的帖文并未提及招聘网站遭黑客入侵的事宜。他写道：“今天，FBI及我们的合作伙伴荷兰国家警察将宣布，一起名为ShinyHunters的全球网络犯罪及威胁行为团体的所谓领导人之一已被逮捕。该团伙与美国、荷兰及全球多起网络攻击有关。”
FBI Director Kash Patel announced on social media last week that a member of the group had been arrested, but his post did not mention the jobs site hack. “This morning @FBI and our partners the Dutch National Police are announcing the arrest of one of the alleged leaders of ShinyHunters — a global cybercrime and threat actor group linked to cyberattacks in the United States, the Netherlands, and around the world,” he wrote.
他在X上的帖子称：“就在我们说话的时候，联邦调查局团队正在积极与合作伙伴合作，根据这次逮捕行动，在正在进行的调查中获取并执行更多线索。”逮捕于9月11日进行。15日，一周前ShinyHunters声称对此次袭击负责。一位熟悉联邦调查局通讯的人士上周表示，一些联邦调查局员工从媒体上得知这起黑客事件后感到不安，并表示该机构反应迟缓。
“As we speak FBI teams are actively working with partners to obtain and execute more leads in the ongoing investigation based on this arrest,” his post on X said. The arrest took place on Sept. 15, a week before ShinyHunters claimed credit for the attack. Some FBI employees were upset to have learned about the hack from the media and said the agency had been slow to respond, a person familiar with the agency’s communications said last week.
联邦调查局在之前的一份声明中表示，该机构“与任何可能受到影响的人定期沟通”，并且该机构“将其信息安全和员工安全视为首要任务”。ShinyHunters是一个定义松散的组织，成员遍布全球。它经常黑客攻击公司窃取他们的数据，并威胁如果不付费就将其发布在暗网上。
The FBI had said in a previous statement that is “in regular communication with anyone who may be impacted,” and that the agency “treats the security of its information and the safety of its workforce as top priorities.”ShinyHunters is a loosely defined group, with members scattered around the globe. It routinely hacks companies to steal their data and threatens to publish it on the dark web if not paid.