
据《政治新闻网》(POLITICO)获得的一份备忘录显示,美国联邦调查局(FBI)系统发生的一起重大数据泄露事件,很可能也波及了司法部各部门的工作人员。
A major data breach of FBI systems likely also affected staffers across the Justice Department, according to a memo obtained by POLITICO.
FBI调查人员在9月认定,该局一个招聘门户网站遭到黑客攻击,属于“重大”网络安全事件,导致黑客窃取了数千名FBI特工的个人信息,包括社会安全号码、出生日期、电话号码、住址和紧急联系人信息。
FBI investigators determined in September that a hack of a bureau jobs portal was a “major” cyber incident, allowing hackers to steal personal information on thousands of FBI agents, including Social Security numbers, birth dates, phone numbers, addresses and emergency contacts.
司法部美国检察官执行办公室主任弗朗西·海克斯(Francey Hakes)于周五向“特定”美国检察官办公室社区员工发送的一份备忘录警告称,美国检察官办公室的部分司法部员工,其个人信息也可能在同一次黑客攻击中被盗。通知称,该招聘门户网站存有对司法部员工和求职者进行背景调查的信息。
A memo sent Friday by Director of the Executive Office for U.S. Attorneys Francey Hakes to “select" U.S. attorney community employees warns that some Justice Department employees in U.S. attorney offices may also have had their personal information stolen in the same hack. The jobs portal holds information from background checks on DOJ employees and job applicants, the notice said.
司法部在一份声明中表示:“FBI正在全力分析数据,并核实受此次泄露影响人员的联系信息,以便及时发出通知。审慎性通知正在分批发送给受影响的员工和其他个人,待FBI确认每位受影响个人的具体数据后,将继续发送正式通知。”当被问及有多少人已收到通知时,司法部拒绝置评。
“The FBI is working diligently to analyze the data and validate the contact information of individuals impacted by this compromise to enable prompt notifications,” the DOJ said in a statement. “Prudential notifications are being sent to impacted employees and other individuals on a rolling basis and formal notifications will continue to be sent when FBI confirms the specific data of each individual impacted.”DOJ declined to comment when asked how many people had received the notification.
FBI发言人未回应置评请求。该局此前将此次黑客攻击归咎于承包商的安全失误,并表示已将该承包商从受影响系统的管理职责中移除。FBI网络部助理主任布雷特·莱瑟曼(Brett Leatherman)当时表示,该局已“采取一切必要措施,以减轻任何进一步风险并保护我们的员工队伍”。网络犯罪组织“闪亮猎手”(ShinyHunters)在9月宣称对该泄露事件负责,并声称窃取了“几乎所有”FBI员工的敏感信息。此次泄露利用了该机构求职网站的一个漏洞,从而访问了一个存放FBI特工档案的非密系统。
An FBI spokesperson did not respond to a request for comment. The bureau previously blamed the hack on a contractor security failure and said it has removed the contractor from managing the affected system. FBI Cyber Division Assistant Director Brett Leatherman said at the time that the bureau has “taken all necessary steps to both mitigate any further risk and protect our workforce.”Cybercriminal group ShinyHunters claimed credit for the breach in September, and said it stole sensitive information on “nearly all” of the FBI’s staff. The breach leveraged a vulnerability on the agency’s job application website, allowing access to an unclassified system holding FBI agents’ records.
美国司法部周五发出的信件加剧了员工的担忧,他们担心不法分子可能利用这些信息伤害联邦工作人员。
The DOJ’s letter Friday has heightened concerns among employees that bad actors could use the information to harm federal staffers.
“存在一些暴力罪犯,他们对检察官、联邦调查局(FBI)特工以及其他参与刑事调查的人员怀恨在心,”一名司法部检察官表示,该检察官获准以匿名方式讨论针对该事件的正在进行的调查。“如果此次泄露扩大到所有FBI背景调查记录,那就意味着检察官及其家人的居住地、姓名等信息都会暴露。因此,最大的担忧是安全问题。”
“There are violent criminals with axes to grind against prosecutors, FBI agents and other people involved in criminal investigations,” said a DOJ prosecutor, who was granted anonymity to discuss the ongoing investigation into the incident. “And if this leak expands to all FBI background checks, that means there’s information about where prosecutors and their families live, and their names. So the biggest concern is safety.”
近几周,特朗普政府经历了多起数据泄露事件,源于有权访问政府记录的第三方系统存在漏洞。
The Trump administration has experienced multiple data breaches in recent weeks stemming from vulnerabilities in third-party systems that have access to government records.
上个月,黑客活动家利用对Okta单点登录服务的访问权限,窃取了超过4万名国土安全部员工的数据。美国移民与海关执法局(ICE)上周四向托管这些记录的公共数据库发出了下架请求,警告称该信息使其特工面临受到伤害的风险。
Last month, hacktivists used access to Okta’s single sign-on service to steal data on more than 40,000 Department of Homeland Security staffers. ICE sent a takedown request for a public database hosting the records last Thursday, warning that the information puts its agents at risk of harm.
据报道,在2025年10月至7月中旬期间,黑客利用五角大楼国防人力数据中心的一个漏洞,导致数百万军人记录遭到泄露。
Millions of military personnel records were also exposed between October 2025 and mid-July after hackers reportedly exploited a vulnerability in the Pentagon’s Defense Manpower Data Center.