獨家：遭駭的 FBI 資料含有員工情報職務的敏感資訊

Raphael Satter、AJ Vicens 報導By Raphael Satter and AJ Vicens

華盛頓，9月23日（路透社）——路透社發現，據稱由駭客組織 ShinyHunters 竊取的美國聯邦調查局（FBI）資料，載有數十名局內官員職務分派的細節，包括針對中國間諜、俄羅斯情報、販毒集團等敏感工作。WASHINGTON, Sept 23 (Reuters) - FBI data allegedly stolen by the hacking group ShinyHunters carries granular detail about scores of bureau officials’ job assignments, including sensitive work against Chinese spies, Russian intelligence, drug cartels, and more, Reuters has found.

這份有 5,000 列的試算表——駭客稱其僅是他們所宣稱掌握的 2 至 3 TB 資料庫中的一小部分——包括他們所稱數千名 FBI 員工的姓名、地址、電話號碼、出生日期、社會安全號碼和緊急聯絡人資訊。資料也包含派駐特定外勤辦事處的細節；在部分案例中，還涉及從事高風險情報、安全或反間諜工作的單位。The 5,000-line spreadsheet – said by the hackers to represent only a small piece of their claimed two- to three-terabyte trove – includes names, addresses, telephone numbers, dates of birth, social security numbers, and emergency contact details for what they claimed were thousands of FBI employees. It also includes details of assignments to specific field offices and, in some cases, to units engaged in high-stakes intelligence, security, or counterespionage work.

FBI 在聲明中表示，已注意到「一個網路犯罪企業集團聲稱入侵 FBIJobs.gov 入口網站，並據稱影響 FBI 員工的個人識別資訊」。FBI 表示，這次外洩的原因仍未確定，但正「積極且全力調查此事」。In a statement, the FBI said it was aware of "a cyber-criminal enterprise group claiming a compromise of the FBIJobs.gov portal and alleged impact to FBI employee personally identifiable information." The bureau said the cause of the breach was still undetermined, but that it was "actively and aggressively investigating the matter."

駭客週二表示，他們已入侵 FBI，竊取大量現任與前任 FBI 員工的資料。ShinyHunters 表示，他們將扣住這些資料，直到 FBI 撤回 5 月發布、對該組織不利的聲明。The hackers said on Tuesday that they had breached the FBI, stealing data on a large number of current and former FBI employees. ShinyHunters said it is holding the data hostage until the bureau rescinds an unflattering statement about the group issued in May.

FBI 前反情報人員艾瑞克・歐尼爾（Eric O’Neill）表示，據稱由 ShinyHunters 竊取的資料，是「外國情報機構的金礦」。Former FBI counterintelligence operative Eric O’Neill said the data allegedly stolen by ShinyHunters was “a foreign intelligence service goldmine.”

歐尼爾在任職 FBI 後創立資安公司 Nexasure AI。他說：「中國會非常想知道哪些人正在對付它。」他預測，其他敵對情報機構也會急於取得這些資料，美國境內心懷不滿的極端分子也一樣。“China would be incredibly interested to know the individuals who are working against it,” said O’Neill, who founded the cybersecurity company Nexasure AI after his stint at the bureau. He predicted that other hostile intelligence services would be eager to get their hands on the data, along with disgruntled extremists in the United States.

他說：「如果我在那份名單上，我會非常擔心。」“If I were on that list I would be very concerned,” he said.

ShinyHunters 週三在聲明中表示，在此同時，該組織正試圖避免人員資訊廣泛流傳。ShinyHunters said in a statement Wednesday that it was trying to keep the personnel information from circulating widely in the meantime.

該組織表示：「如果那 5,000 筆樣本資料外洩，並不是我們造成的。」“If the 5,000 sample data records leak, it’s not because of us,” the group said.

雖然路透社尚無法驗證整份試算表的真實性，但已能將遭駭資料中的資訊，與信用紀錄以及暗網情報平台 District 4 Labs 所持有的過往資料外洩內容交叉比對，個別核實 22 人以上的詳細資料。Although Reuters has not been able to authenticate the entire spreadsheet, it has been able to individually verify the details of more than 22 people by cross-referencing information in the hacked data with credit records and previous data leaks carried by the dark web intelligence platform District 4 Labs.

反恐、反情報與監控COUNTERTERRORISM, COUNTERINTELLIGENCE AND SURVEILLANCE

ShinyHunters 資料中的部分職務分派細節，與員工本人可能公開說出的內容並無差別，例如註明探員在巴爾的摩或紐澤西州紐瓦克等地的外勤辦事處任職。Some of the assignment details in the ShinyHunters’ data are indistinguishable from what employees themselves might say publicly, noting agents at field offices in Baltimore or Newark, New Jersey, for example.

但在部分案例中，資料提到的 FBI 單位或計畫屬於敏感性質，或其存在先前未曾公開披露。But in some cases, the data referred to FBI units or initiatives that were sensitive or whose existence has not previously been disclosed.

這些資料列出 14 名專注於中國相關事務的人員，包括「中國犯罪企業單位」、「中國技術移轉分析單位」和「中國情報科」成員。The data names 14 staffers focused on China-related matters, including members of the “China criminal enterprise unit,” the “China tech transfer analysis unit,” and the “China intelligence section.”

另有 9 人被列為擔任俄羅斯相關職務，其中包括 2 人隸屬「俄羅斯行動科」，以及 1 人從事「俄羅斯關鍵基礎設施與科技威脅」工作。另有 3 人被列為從事以伊朗或真主黨為重點的情報職務。Nine others are listed as serving in Russia-related roles, including two in the “Russia Operations Section” and one working on “Russia Critical Infra and Tech Threat.” Three people are listed as working in Iran- or Hezbollah-focused intelligence roles.

另有 18 人被列為從事「資料攔截」或「電信攔截」技術相關工作，或任職於 FBI 的「祕密技術行動」單位、「隱蔽進入科」，或從事影像、音訊或電子監控職務。Eighteen others are listed as working with “data intercept” or “telecom intercept” technologies, or in the FBI’s “clandestine technical operations” unit, or its “covert access section,” or in video, audio, or electronic surveillance roles.

另外還有 11 名 FBI 人員被列為從事 HUMINT（人力情報）職務，其中數人被列為在「人力情報計畫管理科」任職。A further 11 FBI staffers are listed as working in HUMINT, or human intelligence, jobs, including several listed as working in the “Humint program management section.”

曾與 FBI 共事的前美國陸軍調查員崔佛・希利戈斯（Trevor Hilligoss）表示，把特定具名人士與人力情報工作連結起來的資訊，尤其令人不安。Trevor Hilligoss, a former Army investigator who worked with the FBI, said the information tying specific named people to human intelligence work was particularly troubling.

他說：「臥底探員身分曝光後受到傷害的案例，並不難找到。」“You don’t have to look far to find examples of undercover agents being harmed when their cover is blown,” he said.

希利戈斯現為資安公司 SpyCloud 的首席情報長。他說，資料中包含緊急聯絡人——通常是配偶或子女——讓他的憂慮加深，因為這些人「在作業安全方面的知識，可能少於在敏感領域工作的親屬」。Hilligoss, now the chief intelligence officer for cybersecurity company SpyCloud, said his concerns were heightened by the inclusion of emergency contacts – often spouses or children – “who may have less operational security knowledge than their relative that works in a sensitive field.”

路透社無法證實所有職務分派都真實或為最新資訊，但能將 8 名資料外洩者的職涯細節或職稱，與法院文件、新聞報導、LinkedIn 公開個人檔案，或 Instagram 等網站上的線上貼文資訊相互比對。Reuters could not verify that all the job assignments were authentic or up-to-date, but it was able to match the career details or titles of eight people whose data was leaked to information in court filings, news articles, or public profiles on LinkedIn or to online posts on sites such as Instagram.

其他目標OTHER TARGETS

ShinyHunters 先前聲稱，該組織曾竊取《俠盜獵車手》（Grand Theft Auto）製作商、電玩遊戲開發商 Rockstar Games 的數百萬筆商業紀錄；也聲稱曾入侵教育工具 Canvas，導致美國各地學校大範圍受影響。ShinyHunters previously claimed credit for the purported theft of millions of business records from video game developer Rockstar Games, the maker of "Grand Theft Auto," and an intrusion focused on the education tool Canvas that ⁠triggered widespread disruption across U.S. schools.

FBI 5 月表示，ShinyHunters 有時會利用「誇大取得敏感或個人資訊存取權的說法，促使受害者付款」。In May, the FBI said ShinyHunters sometimes used “exaggerated claims of access to sensitive or personal information to prompt payment from victims.”

ShinyHunters 表示，該組織的「威脅與說法都非常真實」，並補充說，FBI 的聲明正是他們鎖定該局的原因。ShinyHunters said its "threats and claims are very real,” adding that the FBI's statement was why it targeted the bureau.

路透社尚無法查證駭客還掌握哪些其他資料。ShinyHunters 先前告訴路透社，他們取得了與員工和應徵者審查、背景調查委外，以及探員敏感醫療資料相關的檔案，但週三表示不會再釋出任何更多資料。Reuters has not been able to verify what else the hackers are holding. ShinyHunters previously told Reuters they obtained files related to the vetting of employees and applicants, the contracting of background investigations, and agents' sensitive medical data, but said on Wednesday it would not release any further data.

前 FBI 人員歐尼爾提醒，不要對駭客掌握的內容下結論。O’Neill, the former FBI operative, cautioned against drawing conclusions about what the hackers hold.

他指出：「他們其實是在試圖把 FBI 嚇壞。」“They’re really trying to scare the hell out of the FBI,” he noted.

（Raphael Satter、AJ Vicens 報導；Chris Sanders、David Gaffen 編輯）(Reporting by Raphael Satter and AJ Vicens; editing by Chris Sanders and David Gaffen)