华盛顿 —— 泄密网站“分布式秘密拒绝服务”于10月28日表示，已发布了4万多名美国国土安全部（DHS）员工的数据，其中包括从事监视和人力情报等敏感领域工作的官员的详细信息。
WASHINGTON – The leak website Distributed Denial of Secrets said on Oct 28 it has released data on more than 40,000 US Department of Homeland Security (DHS) employees, including details about officials working in sensitive fields such as surveillance and human intelligence.
国土安全部在一份声明中表示，该部门“知悉潜在的数据泄露，正积极努力迅速有效地处理事态”。
DHS said in a statement it was “aware of a potential breach and is actively working to address the situation swiftly and effectively”.
该部门表示，正在努力确保其员工得到妥善保护，并将在“获得更多信息时”向公众通报最新情况。
The agency said it was working to ensure its employees were properly protected and would update the public “when more information is available”.
这家非营利数据透明化组织称，此次披露的信息源自一个自称“和平部”的实体获取的资料，这是过去一个月内登上头条的第三起重大政府数据泄露事件。
The disclosure – which the non-profit data transparency group says draws on information obtained by an entity calling itself “Department of Peace” – is the third major government data leak to have made headlines in the past month.
9月，黑客组织“ShinyHunters”声称从联邦调查局窃取了大量数据，其中包括数千名局员工的敏感工作细节和医疗信息。
In September, the hacking group ShinyHunters claimed the theft of a massive trove of data from the Federal Bureau of Investigation, including sensitive job details and medical information from thousands of bureau employees.
10月，国防部因一起泄露数百万现役和前军人数据的事件，面临集体诉讼。
In October, the Defence Department was hit with a class action lawsuit following a breach that exposed data on millions of current and former military personnel.
美国国土安全部的数据包括移民与海关执法局、海关与边境保护局、国土安全调查局、网络安全与基础设施安全局及其他国土安全部下属机构员工的姓名、电话号码和电子邮件地址。
The DHS data includes names, phone numbers and e-mail addresses of employees from Immigration and Customs Enforcement, Customs and Border Protection, Homeland Security Investigations, the Cybersecurity and Infrastructure Security Agency, and other DHS component agencies.
数据中还包含职称和电子邮件组，除其他细节外，这些信息显示了哪些特工被分配到特别行动、监视任务、计算机取证和卧底工作。
Also included in the data were job titles and e-mail groups, which, among other details, showed which agents were assigned to special operations, surveillance jobs, computer forensics and undercover work.
分布式拒绝秘密组织的联合创始人艾玛·贝斯特在一份声明中表示，被称为“玛雅·纵火罪”的黑客活动人士兼记者开发了一款针对这些数据的搜索工具，可让公众浏览这些数据。
In a statement, Distributed Denial of Secrets co-founder Emma Best said the hacktivist and journalist known as “maia arson crimew” developed a search tool for the data that would allow the public to browse it.
贝斯特表示，该工具将“用问责制取代匿名”，为记者赋能，指导公共记录申请，并加强国会监督。
Best said the tool would “replace anonymity with accountability” and empower journalists, guide public records requests and boost congressional oversight.
克里姆尤表示，她的工具将“在未来数年内提供《信息自由法》材料！”和平部未立即回应置评请求，但在随数据发布的一份声明中表示，国土安全部员工“掌握着我们的信息，所以我们掌握他们的信息才公平”，并希望这些数据“能被用于限制国土安全部造成进一步伤害，并支持所有朝这一方向的努力”。
Crimew said her tool would provide “FOIA material for years to come!”The Department of Peace did not immediately respond to a request for comment, but in a statement included with the data it said that DHS employees “have our information, so it’s only fair that we have theirs” and that it hoped the data “can be used to limit further harm by the DHS and supports all efforts in that direction”.
和平部今年3月曾声称对入侵国土安全部负责，并发布了与外部供应商合同相关的文件。
The Department of Peace in March claimed responsibility for hacking DHS and posting documents related to contracts with outside vendors.
贝斯特的声明称，和平部从国土安全部使用的Okta单点登录服务中获取了这些数据。路透社无法立即证实这一说法。
Best’s statement said the Department of Peace harvested the data from the Okta sign-on service used by DHS. Reuters could not immediately corroborate the claim.
Okta在回应路透社询问时表示：“Okta是安全的，我们没有证据表明我们的数据或系统遭到入侵。”路透社无法立即核实整个数据集的真实性，但能够将泄露信息中六名国土安全部员工的个人信息与信用局记录以及暗网情报平台District 4 Labs所载的泄露数据进行匹配。
Okta said in response to a Reuters query: “Okta is secure, and we have no evidence our data or systems were compromised.”Reuters could not immediately verify the authenticity of the entire data trove, but it was able to match personal information about six DHS employees named in the leak to credit bureau records and breach data carried by the dark web intelligence platform District 4 Labs.
路透社直接致电三名国土安全部员工，并成功确认了他们的电话号码及其他详细信息。其中一人表示，这是他们第一次听说发生了泄露。
Reuters called three DHS employees directly and was able to confirm their phone numbers and other details. One said it was the first they had heard of a breach.
在若干案例中，这些数据与国土安全部员工领英个人资料上可获取的信息一致。但在其他案例中，数据揭示了有关国土安全部内部组织架构图的非公开信息，或此前未披露的项目或行动。
In several cases, the data tracked information available on DHS employees’ LinkedIn profiles. But in others, the data revealed nonpublic data about internal DHS organisation charts or previously undisclosed programmes or operations.