字号·· | 护眼
耶路撒冷邮报

泄密网站公布数万名国土安全部员工数据Leak website releases data on tens of thousands of DHS employees

点「原文对照」整页切到原文,或双击某段只看那段的原文。

泄密网站“分布式拒绝秘密”周三表示,其已发布超过4万名国土安全部雇员的数据,其中包括在监控和人力情报等敏感领域工作的官员的详细信息。

The leak website Distributed Denial of Secrets said on Wednesday it has released data on more than 40,000 Department of Homeland Security employees, including details about officials working in sensitive fields such as surveillance and human intelligence.DHS said in a statement it was "aware of a potential breach and is actively working to address the situation swiftly and effectively."

国土安全部在一份声明中表示,“已得知可能存在数据泄露,并正积极采取行动,迅速有效地处理此事。”该机构表示,正在努力确保其雇员得到妥善保护,并将在“获得更多信息时”向公众通报最新情况。

The agency said it was working to ensure its employees were properly protected and would update the public "when more information is available.”

该非营利数据透明组织称,此次披露的数据来自一个自称“和平部”的实体所获取的信息。这是过去一个月内第三起登上头条新闻的重大政府数据泄露事件。

The disclosure, which the nonprofit data transparency group says draws on information obtained by an entity calling itself "Department of Peace," is the third major government data leak to make headlines in the past month.

今年9月,黑客组织“闪亮猎人”声称窃取了联邦调查局的大量数据,其中包括数千名联邦调查局雇员的敏感工作详情和医疗信息。上周,国防部因一场泄露了数百万现役和退役军事人员数据的违规事件而遭到集体诉讼。

In September, the hacking group ShinyHunters claimed the theft of a massive trove of data from the Federal Bureau of Investigation, including sensitive job details and medical information from thousands of bureau employees. Last week, the Defense Department was hit with a class action lawsuit following a breach that exposed data on millions of current and former military personnel.

此次泄露的国土安全部数据包括来自移民和海关执法局、海关与边境保护局、国土安全调查局、网络安全和基础设施安全局以及其他国土安全部下属机构雇员的名字、电话号码和电子邮件地址。

The DHS data includes names, phone numbers, and email addresses of employees from Immigration and Customs Enforcement, Customs and Border Protection, Homeland Security Investigations, the Cybersecurity and Infrastructure Security Agency, and other DHS component agencies.

资料图片:2026年1月24日,美国国土安全部徽章展示在华盛顿特区联邦应急管理署国家响应协调中心。(图片来源:路透社/内森·霍华德/资料图片)FILE PHOTO: The US Department of Homeland Security seal is displayed at the FEMA National Response Coordination Center in Washington, DC, January 24, 2026. (credit: REUTERS/NATHAN HOWARD/FILE PHOTO)

数据中还包括职位名称和电子邮件群组,除其他细节外,这些信息显示了哪些探员被分配到特种行动、监控、计算机取证和卧底工作岗位。

Also included in the data were job titles and email groups, which, among other details, showed which agents were assigned to special operations, surveillance jobs, computer forensics, and undercover work.

分布式拒绝秘密联合创始人艾玛·贝斯特在一份声明中表示,名为“玛雅·阿森·克赖姆”的黑客活动分子为这些数据开发了一个搜索工具,供公众浏览。

In a statement, Distributed Denial of Secrets co-founder Emma Best said the hacktivist known as "maia arson crimew" developed a search tool for the data that would allow the public to browse it.

Best表示,该工具将“用问责制取代匿名性”,并将赋能记者、指导公共记录请求,并加强国会监督。和平部未立即回应置评请求,但在随数据附带的声明中表示,DHS员工“掌握我们的信息,那么我们掌握他们的信息也只公平”,并希望该数据“可用于限制DHS造成的进一步伤害,并支持所有朝着这个方向努力的行动”。实体声称对之前的DHS黑客攻击负责和平部在3月声称对黑客攻击DHS并发布与外部供应商合同相关的文件负责。

Best said the tool would "replace anonymity with accountability" and empower journalists, guide public records requests, and boost congressional oversight. The Department of Peace did not immediately respond to a request for comment, but in a statement included with the data it said that DHS employees "have our information, so it's only fair that we have theirs" and that it hoped the data "can be used to limit further harm by the DHS and supports all efforts in that direction." Entity claimed responsibility for previous DHS hackThe Department of Peace in March claimed responsibility for hacking DHS and posting documents related to contracts with outside vendors.

Best的声明称,和平部从DHS使用的Okta登录服务中收集了数据。路透社未能立即证实该说法。Okta回应路透社查询时表示:“Okta是安全的,我们没有证据表明我们的数据或系统遭到破坏。”路透社未能立即验证整个数据集的真实性,但能够将泄露中提及的六名DHS员工的个人信息与信用局记录以及暗网情报平台District 4 Labs持有的泄露数据进行匹配。

Best's statement said the Department of Peace harvested the data from the Okta sign-on service used by DHS. Reuters could not immediately corroborate the claim. Okta said in response to a Reuters query, "Okta is secure, and we have no evidence our data or systems were compromised." Reuters could not immediately verify the authenticity of the entire data trove, but it was able to match personal information about six DHS employees named in the leak to credit bureau records and breach data carried by the dark web intelligence platform District 4 Labs.

路透社直接致电三名DHS员工,并能够确认他们的电话号码和其他细节。其中一人表示,这是他们第一次听说有数据泄露。在几个案例中,该数据跟踪了DHS员工LinkedIn个人资料上可用的信息。但在其他案例中,该数据揭示了关于DHS内部组织架构图或此前未披露的计划或行动的非公开数据。

Reuters called three DHS employees directly and was able to confirm their phone numbers and other details. One said it was the first they had heard of a breach. In several cases, the data tracked information available on DHS employees' LinkedIn profiles. But in others, the data revealed nonpublic data about internal DHS organization charts or previously undisclosed programs or operations.

阅读媒体原文 ↗