国土安全部逾4万名员工资料遭泄露：黑客组织公开「Icepick」数据库含卧底人员信息，DHS称正处置
据美国全国公共广播电台（NPR）10月28日报道，一个黑客组织攻破了美国国土安全部（DHS）的人事档案，逾4万名国土安全部特工、行动人员与相关人员的姓名、电话号码与地址于10月28日被公开，其中包括从事卧底工作的人员。
据报道，自称「Department of Peace」的黑客活动组织称，其通过绕过国土安全部的单点登录系统窃得数据，并把资料交给Distributed Denial of Secrets组织，由该组织以名为「Icepick」的数据库形式在网上公开。该组织还把资料分享给美国记者Ryan Ottignon与一名瑞士黑客，由二人建成可搜索的在线数据库。上述入侵路径为黑客一方的说法。
泄露记录中，逾21,000条对应美国海关与边境保护局（CBP）员工，另有约10,000条与移民与海关执法局（ICE）及其国土安全调查局（HSI）员工相关。NPR指出，这是史无前例的情报泄露，紧随联邦调查局（FBI）遭遇类似黑客攻击之后；该数据库并不完整，约占国土安全部逾220,000名员工总数的五分之一。
国土安全部在声明中表示，该部「已注意到一起潜在泄露，正在迅速、有效地处置这一情况」，并称正采取必要措施「确保所有人得到妥善保护」。
Distributed Denial of Secrets共同创办人Emma Best称，这次泄露「非同寻常，却又简单得具有欺骗性」，因为它明确显示了负责监督秘密与卧底行动的官员与国土安全部遣返、驱逐项目关键人员之间的关联。该黑客组织发言人在网上声明中，把这次行动与国土安全部长Markwayne Mullin 7月17日「加大力度」的表态相联系。附在文件上的说明写道：「他们有我们的信息，所以我们有他们的信息才公平。」
Over 40,000 DHS Employees' Details Exposed in 'Icepick' Leak Including Undercover Personnel: DHS Says It Is Addressing a Potential Breach
A hacking group cracked the U.S. Department of Homeland Security's personnel files, exposing the names, phone numbers and addresses of more than 40,000 DHS agents, operatives and associates on October 28, including those involved in undercover operations, NPR reported on October 28.
According to NPR, the hacktivist group calling itself the Department of Peace said it stole the data by subverting the DHS single sign-on system, and distributed the material to Distributed Denial of Secrets, which posted it online in a database called Icepick. The group also shared the trove with U.S.-based journalist Ryan Ottignon and a Swiss hacker known as maia arson crimew, who together created a searchable online database. The claimed entry path is the hackers' account.
More than 21,000 of the records identify employees of U.S. Customs and Border Protection (CBP), and another 10,000 relate to Immigration and Customs Enforcement (ICE) employees and its Homeland Security Investigations (HSI) unit. NPR described it as an unprecedented breach of intelligence, coming on the heels of similar hacking attacks at the FBI, and noted the database is far from comprehensive, representing about a fifth of the DHS workforce of a little more than 220,000 people.
In a statement, DHS said it was “aware of a potential breach and is actively working to address the situation swiftly and effectively,” and added that it is taking necessary steps to “ensure all are properly protected.”
DDoSecrets cofounder Emma Best called the leak “extraordinary but deceptive in its simplicity,” because it makes explicit connections between officials responsible for overseeing covert and undercover operations and key personnel in DHS's rendition and deportation programs. A spokesperson for the hacktivist group linked the action in an online statement to DHS Secretary Markwayne Mullin's July 17 pledge to “turn up the heat.” A note attached to the files read: “They have our information, so it's only fair that we have theirs.”
来源：GSM·美国（原文链接）
图片来源：美国国土安全部总部航拍（资料图，美国海岸警卫队 Senior Chief Petty Officer Michael Hvozda，公共领域）
