The men allegedly infiltrated 30 government websites in addition to private sector sites.
The new media policy states that U.S. intelligence employees who have "unauthorized" contact with the media could lose their jobs.
In an open letter to the NIST, a group comprised of a dozen privacy groups urged the agency be more transparent.
A Dutch minister of justice will decide where Vladimir Drinkman will land to face charges related to his involvement in the cyber crime collective responsible for the Heartland Payment breach.
The threat, dubbed "Unflod Baby Panda," was discovered by Reddit users and analyzed by researchers at the German-based security firm, SektionEins.