DHS analysts twice ruled hackers inside its information-sharing network a false positive, letting intruders steal credential files from the system supporting World Cup security.