FBI says contractor failure led to hack of its jobs website

WASHINGTON — The FBI’s internal review of a hack of its jobs portal last month has so far determined that a “security failure” by a contractor managing the site caused the breach.

“To date, our review has determined that the incident occurred as the result of a security failure of a platform managed by a third-party organization — after a contractor failed to implement a security patch explicitly issued to secure the platform,” Cyber Division Assistant Director Brett Leatherman said in a statement Tuesday.

The statement said the FBI has removed the contractor, which it did not identify, “and taken all necessary steps to both mitigate any further risk and protect our workforce. We will continue to bring the responsible parties to justice, with multiple arrests already occurring.”

The hack of the FBIJobs.gov portal took place late last month, and ShinyHunters, a cyber-extortion outfit, claimed credit for it.

A representative of the group told NBC News at the time that it used the job portal to gain access to other agency programs, stealing between 2 and 3 terabytes of files. NBC News was not able to verify the extent of the claims.

Leatherman’s statement appeared to confirm that the agency…

Original source: https://www.nbcnews.com/business