Ажилд орох хүсэлт гаргагчдын порталаар дамжин хакердуулсан тус байгууллага ажилтнуудынхаа нийгмийн даатгалын дугаар, хаяг болон эрүүл мэндийн эмзэг мэдээлэл алдагдсаныг мэдэгдэв
Холбооны мөрдөх товчоо (FBI) өөрийн ажилд орох хүсэлт хүлээн авах портал халдлагад өртсөний улмаас ажилтнуудын хувийн мэдээлэл алдагдсаныг дотоод мэдэгдлээрээ дамжуулан хүлээн зөвшөөрлөө. ShinyHunters нэртэй хакеруудын бүлэглэл Oracle PeopleSoft серверийн эмзэг байдлыг ашиглан FBI-ийн ажилтнууд болон ажилд орохоор өргөдөл гаргагчдын мэдээллийн санд нэвтэрсэн байна.
Алдагдсан мэдээллийн дунд ажилтнуудын нэр, хаяг, албан тушаал, нийгмийн даатгалын дугаараас гадна цус, шээсний шинжилгээний хариу болон сэтгэцийн эмнэлгийн дүгнэлт зэрэг хувийн нууцын зэрэглэлтэй баримтууд багтжээ. Хакерууд мөнгөн төлбөр нэхээгүй бөгөөд харин FBI-аас өмнө нь гаргасан тайлан дахь тэдний үйл ажиллагаатай холбоотой мэдээллийг залруулахыг шаардаж байгаа аж.
Үндэсний аюулгүй байдлын шинжээч Жастин Шерман энэхүү үйл явдлыг АНУ-ын засгийн газрын хувьд тагнуулын эсрэг сөрөг үйл ажиллагааны томоохон гамшиг хэмээн тодорхойлсон байна. Тэрээр энэ төрлийн мэдээлэл алдагдах нь ажилтнуудыг фишинг халдлага болон гаднын тагнуулын байгууллагуудын бай болох эрсдэлд оруулж болзошгүйг анхаарууллаа.
FBI энэхүү хэргийг “кибер аюулгүй байдлын осол” хэмээн албан ёсоор бүртгэсэн ч Конгресст мэдэгдсэн эсэх нь тодорхойгүй байна. Холбооны хуулийн дагуу үндэсний аюулгүй байдалд хохирол учруулахүйц мэдээлэл алдагдсан тохиолдолд Конгресст заавал тайлагнах үүрэгтэй бөгөөд тус товчооны ажилд орох портал одоогоор ажиллагаагүй хэвээр байна.
Дэлгэрэнгүйг эх сурвалжаас харах
↓Эх сурвалжийг нээх ↓
The Federal Bureau of Investigation has reportedly told its agents and support staff that their personal information was stolen in a recent cyberattack that targeted the bureau’s job application portal.
It’s the bureau’s first acknowledgement that the personal information of FBI agents was taken in the breach. The FBI has not publicly confirmed a breach beyond a statement last week, in which it said it was aware that a hacking group had claimed a cyberattack, but that the theft of data was “still undetermined.”
As reported by MS NOW reporter Ken Dilanian over the weekend, the FBI has since declared a “cyber security incident” in an internal notification to staff, telling employees that their names, addresses, job titles, and their Social Security numbers were exposed.
Several media outlets have since confirmed that some of the stolen data included medical information, such as records relating to blood and urine samples, as well as psychiatric reports.
The hacking group called ShinyHunters previously told TechCrunch that they “have data on mostly all of FBI,” and a “substantial” amount of information on applicants who applied through the FBIJobs.gov portal. The hackers broke in by exploiting a vulnerability in an Oracle PeopleSoft server, which hosts reams of human resources information on agents and now-employees who applied through the portal.
The hackers told TechCrunch that they are not seeking a financial ransom, but are demanding the correction of an earlier FBI-issued report, which they say misrepresents their activities.
Justin Sherman, a national security expert, called the data breach a “counterintelligence disaster” for the U.S. government in a blog post for Lawfare. He warned that the data theft would “expose thousands of FBI personnel to profiling, phishing, foreign intelligence approaches, and much more.”
While the bureau has notified employees, it’s less clear if the FBI has disclosed the incident to lawmakers in Congress who have oversight of the FBI. Under federal law, alerting Congress is required when an intrusion meets the bar of a “major incident” — such as if a data breach involves the theft of personally identifiable information that is “likely to result in demonstrable harm” to U.S. national security.
It’s likely that bureau lawyers are trying to figure that out right now. If a disclosure is required, it would be the FBI’s second known notification to lawmakers this year about a data breach, after hackers, suspected to be Chinese, broke into a surveillance system that exposed targets of FBI surveillance and investigations earlier this year.
A spokesperson for the FBI did not respond to TechCrunch’s request for comment on Monday, and a White House spokesperson also did not respond to an email asking if the bureau had declared a major incident.
Representatives for several lawmakers whose jurisdictions cover oversight of the FBI did not have any immediate answers.
ABC News reports that the FBI’s job site has been the primary way to apply for a job with the bureau since 2017. The portal remains down at the time of publication.
Do you work at the FBI and have received a notice about the data breach? We want to hear from you. You can contact this reporter securely on Signal at zackwhittaker.1337, or reach him by email at zack.whittaker@techcrunch.com.
When you purchase through links in our articles, we may earn a small commission. This doesn’t affect our editorial independence.
