泄密暴露4.1万名国土安全部员工——包括卧底移民海关执法局特工
Leak Exposes 41,000 Homeland Security Workers–Including Undercover ICE Agents

原始链接: https://www.wired.com/story/massive-leak-exposes-41000-homeland-security-workers-including-undercover-ice-agents/

国土安全部和司法部未置评;联邦调查局将《连线》杂志指引至国土安全部。《连线》杂志对泄露记录的分析发现,海关与边境保护局人员占大多数条目,移民和海关执法局约1万人,美国公民及移民服务局6,200人,网络安全与基础设施安全局近1,000人;合计约占国土安全部员工总数的七分之一。文件显示国土安全部的权限组访问权限,包括与经认证的卧底行动相关的国土安全调查组,如“CUC”和“Keyhole”,以及窃听和监控项目。组名还涉及Palantir Falcon和PenLink等工具。两个名为“Executive Leadership”和“AI Access”的组列出相同的13人,这些人员被豁免于国土安全部的网页过滤器,包括前国土安全部部长克里斯蒂·诺姆、前首席信息官安东尼·麦科德、菲利普·黑格塞斯和杰斯·克拉钦费尔斯。

一篇 Hacker News 讨论围绕据报道泄露的 41,000 名国土安全部工作人员(包括卧底 ICE 特工)展开,泄露似乎通过 Okta/SSO 妥协发生。评论者争论这些身份是否本应公开,许多人认为执法问责要求未遮掩、可识别的警员。其他人警告,暴露卧底人员可能危及特工及其家人,尤其是在贩运或走私调查中。帖子还涉及将 SSO 作为单点故障的安全担忧,围绕 ICE 滥用、特朗普、选举和问责的更广泛政治争论,以及呼吁将泄露姓名与 1 月 6 日、警察不当行为和使用武力数据库交叉比对。一些人将泄露视为问责以及招聘或租房歧视的工具,而另一些人担心私刑和未来报复。总体而言,讨论混合了对 ICE 做法的愤怒、安全教训,以及泄露数据是否会导致真正后果的不确定性。
相关文章

原文

DHS and DOJ did not respond to WIRED’s request for comment. The FBI referred WIRED’s inquiry to DHS.

According to a WIRED analysis of the data, CBP staffers account for more than half of the records. ICE accounts for about 10,000, roughly a third of them in Homeland Security Investigations, ICE’s investigative wing. Another 6,200 belong to US Citizenship and Immigration Services, and nearly 1,000 are tied to the Cybersecurity and Infrastructure Security Agency, more than half of them contractors. Altogether, the files cover about a seventh of DHS’s workforce, revealing how DHS is structured, from senior leadership down to individual immigration agents and detention contractors.

Like most large organizations, DHS uses permission groups to control access to internal systems, according to the leaked records. Nearly everyone named in the leak has access to at least some of these systems. At HSI, 39 employees across more than a dozen field offices belong to groups whose names include “CUC,” which government court filings say stands for “certified undercover operation.” Another group, apparently based in HSI's St. Paul, Minnesota area of operations, references "Keyhole," which federal court filings describe as a certified undercover operation that recently funded HSI's undercover surveillance of Minneapolis protest groups earlier this year. Others reference a “Communications Intercept Center TechOps (CICTO) Program,” a “Title III Intercept Program” for wiretaps, and an “Illicit Sensor Intercept Program (ISIP).”

The names of the groups—there are over 55,000 in all—appear to reference tools for accessing immigration court records, pulling data from seized phones, and conducting surveillance. These include Palantir’s Falcon investigative platform and PenLink, which analyzes phone records and social media.

Two permission groups, named “Executive Leadership” and “AI Access,” appear to list people given exceptions to DHS's web filter, which blocks some websites for employees. They contain the same 13 people, including former DHS head Kristi Noem; Antoine McCord, the recently departed DHS chief information officer who has returned to defense tech company Anduril; Philip Hegseth, listed as a senior advisor to the DHS secretary and the younger brother of defense secretary Pete Hegseth; and Jayce Krachenfels, listed as a policy adviser, who previously worked as a regional field director for Donald Trump’s 2024 presidential campaign, according to his LinkedIn profile.

联系我们 contact @ memedata.com