黑客名为“Department of Peace”的实体通过身份管理服务Okta窃取了超过41,000名美国国土安全部（DHS）员工的个人信息 1。泄露的数据包括姓名、职位、电话号码、电子邮件地址和办公室位置 1。受影响机构涉及美国移民和海关执法局（ICE）以及海关和边境保护局（CBP），其中约21,000条记录属于CBP员工 1。这些数据将这些机构与特定的监控工具关联起来 1。此外，泄露内容还包含涉及特殊行动、监控或卧底工作的职位细节以及内部组织结构图 2。
非营利组织 Distributed Denial of Secrets 发布了这批源自自称“Department of Peace”实体的数据，声称此举旨在促进问责制 2。该组织联合创始人 Emma Best 称，数据是从 DHS 使用的 Okta 登录服务中收割的 2。对此，Okta 发表声明称其系统安全，且无证据表明数据或系统被入侵 2。路透社通过比对信用局记录和暗网情报平台 District 4 Labs 匹配了部分员工信息，并直接致电确认，证实泄露内容中包含真实个人信息 2。此次事件是过去一个月内发生的第三起重大政府数据泄露案，此前 FBI 数据被 ShinyHunters 窃取，国防部因泄露数百万军人数据面临集体诉讼 2。
More than 41,000 records belonging to employees of the United States Department of Homeland Security (DHS) have been stolen and subsequently published online 12. The data was allegedly harvested by an entity calling itself "Department of Peace" via Okta, an identity access management service used by the agency 12. While the initial theft is attributed to this hacker group, the non-profit organization Distributed Denial of Secrets publicly released the dataset, stating its intention to promote accountability 2.
The compromised information includes names, job titles, telephone numbers, email addresses, office locations, internal organizational charts, and details regarding special operations, surveillance, and undercover work 12. Approximately 21,000 of the affected records belong to staff at Customs and Border Protection (CBP), while others are associated with Immigration and Customs Enforcement (ICE) 12. Reuters verified a portion of the leaked content by matching personal details of about six employees through credit bureau records and dark web intelligence platforms District 4 Labs, as well as confirming specific information with three employees directly 2.
This incident marks the third major government data breach in the past month, following reports that FBI data was stolen by ShinyHunters and the Department of Defense faced lawsuits over the leak of millions of military personnel records 2. In response to the current breach, Okta issued a statement declaring that its systems remained secure and noting there was no evidence indicating a compromise of their infrastructure or data 2.
评论
还没有评论，欢迎留下第一条。