FBI investigates after ShinyHunters claims breach of personnel records
The FBI is investigating claims by hacking group ShinyHunters that it breached the bureau's career portal and stole terabytes of sensitive personnel records.
Cybercriminal group ShinyHunters claimed it breached FBI systems and defaced the bureau's recruitment website, alleging it stole 2 to 3 terabytes of personnel data. The group asserted that it exploited an Oracle PeopleSoft zero-day vulnerability before pivoting into AWS GovCloud to access records spanning employees and applicants. To support its claims, the group released a sample of 5,000 employee records.[2][7][8][10]
The compromised files reportedly include home addresses, Social Security numbers of agents' families, and details on officials' sensitive assignments covering Chinese spies, Russian intelligence, and drug cartels. A sample examined by Reuters contained granular job assignment details, and the news agency independently verified information for more than 22 individuals listed in the data.[1][5][6]
The FBI stated that it is aware of allegations regarding unauthorized activity involving its career site and is investigating the incident. ShinyHunters stated the intrusion was not financially motivated, demanding that the agency retract a May public advisory that accused the hacking group of swatting and threatening victims' families.[2][3][4][9]
Key facts
- ShinyHunters claimed it breached FBI systems and downloaded 2 to 3 terabytes of records covering employees and applicants.
- The group claimed it used an Oracle PeopleSoft zero-day flaw to access systems before moving into AWS GovCloud and defacing the FBI jobs portal.
- ShinyHunters released 5,000 employee records as a sample to support its breach assertion.
- Allegedly stolen files detailed assignments regarding Chinese and Russian intelligence, with Reuters independently verifying data for more than 22 individuals.
- Hackers claimed the haul includes home addresses and Social Security numbers belonging to relatives of FBI agents.
- The FBI confirmed it is aware of claims of unauthorized activity on its career website and is actively investigating.
- ShinyHunters asserted the attack was non-financial and demanded the retraction of a May FBI bulletin accusing the group of swatting and extortion.
Sources · 9 sources
- *B
*Walter Bloomberg@DeItaonePost on X ·
HACKERS CLAIM MASSIVE FBI DATA BREACH Hacking group ShinyHunters claims it stole 2–3 terabytes of FBI data, including sensitive information on thousands of current and former employees. A leaked sample reportedly contains personal details and job assignments, including work involving Chinese and Russian intelligence and drug cartels. The FBI says it is actively investigating the alleged breach, while Reuters independently verified details for more than 22 individuals.
Open source - CB
Coin Bureau@coinbureauPost on X ·
⚠️ALERT: Hacking group ShinyHunters CLAIMS it breached FBI systems and allegedly stole data on all employees and applicants. The group says it exploited an Oracle zero-day to deface the FBI jobs site before moving into AWS GovCloud and downloading 2 to 3 TERABYTES of data, per The Register. The FBI says it is "aware of claims regarding unauthorized activity" and is investigating. The jobs site remains offline. ShinyHunters says the attack is "NOT financially motivated" and wants the FBI to retract a May bulletin that accused the group of swatting and threatening victims' families.
Open source - MN
Mario Nawfal@MarioNawfalPost on X ·
🇺🇲 The FBI is investigating CYBERCRIMINALS who HACKED the agency's jobs portal. ShinyHunters claims it accessed the system and stole a large cache of files containing personal information. The hackers are known for stealing company data and threatening to leak it unless a ransom is paid. ShinyHunters said the breach was in retaliation for the FBI posting a public service announcement about them in May. If the FBI can’t protect itself… How can we trust it to protect us? Source: NBC News / Writer: Marie
Open source - FN
Fox News@FoxNewsPost on X ·
A notorious hacking group claims it breached an FBI online system and stole sensitive data belonging to thousands of agents and job applicants. ShinyHunters makes the explosive claim months after the FBI publicly warned about the group's large-scale data breaches and extortion tactics. The FBI says it is aware of allegations involving the bureau's career website and is investigating. Fox has not independently verified the hackers' claims or seen evidence establishing the scope of any breach. Follow the latest developments on the FBI’s investigation into allegations involving its career website with the Fox News app. Download here: https://t.co/BAyV31y5kz
Open source - RE
Reuters@ReutersPost on X ·
Exclusive: FBI data allegedly stolen by the hacking group ShinyHunters carries granular detail about scores of bureau officials’ job assignments, including sensitive work against Chinese spies, Russian intelligence, drug cartels, and more, Reuters has found https://t.co/pInNCSO393
Open source - QU
Quartz@qzPost on X ·
Hackers claim they stole home addresses and SSNs of FBI agents' families: ShinyHunters says it breached the FBI's jobs portal using a software flaw and walked off with up to 3TB of data on tens of thousands of agents, applicants, and… https://t.co/cqzrC9N38t #FBI #Cybersecurity https://t.co/71nEBedqH8
Open source - QU
Quartz@qzPost on X ·
ShinyHunters claims it hacked the FBI and stole data on thousands of agents: The hacking group says it exploited a zero-day vulnerability in Oracle software to breach the FBI's jobs portal and take 2 to 3 terabytes of data https://t.co/O3rczkbc6O https://t.co/NogV5g7ldc
Open source - TE
Techmeme@TechmemePost on X ·
ShinyHunters claims it used an Oracle PeopleSoft zero-day to hack FBI-related services and steal employee and applicant data; it also defaced the FBI jobs site (@josephfcox / 404 Media) (Visit Techmeme dot com for the link and full context!)
Open source - BL
Bloomberg@businessPost on X ·
The FBI is investigating hackers’ claims that they broke into the bureau’s systems and stole thousands of current and former employees’ data, the bureau said in a statement Wednesday https://t.co/ZASc4P21Kk
Open source - RE
RedState@RedStatePost on X ·
‘We Hacked the FBI’: ShinyHunters Hands Over 5,000 Employee Records to Back Up Stunning Breach Claim https://t.co/FcJqAUUor6
Open source