美国联邦调查局逮捕了另一名嫌疑人的同谋ShinyHunters黑客组织导演卡什·帕特尔周五宣布。
帕特尔表示:“我们的外勤特工已经逮捕了ShinyHunters集团的另一名嫌疑共谋者,该集团被认为对最近发生在第三方供应商管理的平台上的FBIjobs.gov事件负责。”
根据该局的说法,这次入侵是在9月下旬首次发现的,由网络集团ShinyHunters实施,目标是美国联邦调查局的就业网站,获得了数以千计的员工人事记录。
帕特尔说:“这次逮捕显示了我们保护美国人免受网络犯罪侵害的努力的力度和广度。”。
在最初表示他们将发布敏感信息后,该组织告诉记者,他们撤回了威胁。
根据该局最高网络官员的一份声明,周一,美国联邦调查局“移除”了一家承包公司,称该公司对允许黑客将数千名员工的数据暴露给网络犯罪分子的漏洞负有主要责任。
“到目前为止,我们的审查已经确定,该事件是由第三方组织管理的平台的安全故障导致的——在承包商未能实施明确发布的安全补丁来保护平台之后,”美国联邦调查局网络助理总监布雷特·莱泽曼在一份声明中说。“因此,美国联邦调查局已经移除了承包商,并采取了所有必要的措施来减轻任何进一步的风险和保护我们的劳动力。”
消息人士告诉ABC新闻,9月下旬,美国联邦调查局向员工发送了一份通知,称该组织已经获得了员工的姓名、地址、个人和工作联系信息、社会保险号、出生日期和紧急联系信息。消息人士称,该局的运作就好像每个美国联邦调查局雇员的个人信息都被泄露了一样。
FBIJobs.gov美国联邦调查局表示,受影响的系统是非机密的。
美国联邦调查局还向那些可能受到影响的人发出警告,敦促他们保持对情况的了解,不要接听任何可疑的电话。还将为受到影响的员工召开内部简报会。
根据消息人士向ABC新闻描述的通知,美国联邦调查局说,员工不应该与媒体交谈,如果媒体“侵入”,员工应该拨打911。
Suspect arrested in FBI hack that exposed employee information
The FBI arrested another suspectedco-conspirator of theShinyHunters hacking group, director Kash Patel announced on Friday.
"Our agents in the field have arrested another suspected co-conspirator of the ShinyHunters group – the group believed to be responsible for the recent FBIjobs.gov incident, which occurred on a platform managed by a third-party vendor," according to Patel.
The breach, first discovered in late September, was carried out by the cyber group ShinyHunters and targeted the FBI's job website, obtaining thousands of personnel records of its employees, according to the bureau.
"This arrest demonstrates the strength and reach of our efforts to protect Americans from cybercrime," Patel said.
After initially saying they would post the sensitive information, the group told reporters they recanted the threat.
On Monday, the FBI "removed" a contracting company that it said was primarily responsible for the breach that allowed the hack that exposed thousands of employees' data to cyber criminals, according to a statement from the top cyber official at the bureau.
“To date, our review has determined that the incident occurred as the result of a security failure of a platform managed by a third-party organization - after a contractor failed to implement a security patch explicitly issued to secure the platform," FBI Cyber Assistant Director Brett Leatherman said in a statement. "As such, the FBI has removed the contractor and taken all necessary steps to both mitigate any further risk and protect our workforce."
In late September, the FBI sent a notice to employees that the group had obtained employee names, addresses, personal and work contact information, Social Security numbers, dates of birth, and emergency contact information, sources told ABC News. The bureau is operating as if every FBI employee’s personal information was compromised, the sources said.
The FBI said the impacted system, FBIJobs.gov, was unclassified.
The FBI also issued a warning for those who may be impacted, urging that they maintain situational awareness and not answer any suspicious calls.There will also be internal briefings for employees who have been impacted.
According to the notice described to ABC News by sources, the FBI said that employees should not talk to the media and if the media is "trespassing" employees should call 911.





