The ShinyHunters, a notorious cybercrime organization known for massive data thefts and extortion campaigns, asserts that it has breached FBI systems and exfiltrated sensitive information regarding thousands of agents and job applicants. According to the group’s dark web leak site, which TechCrunch reviewed, the hackers obtained details on nearly all FBI personnel and individuals who submitted employment applications.
404 Media initially reported the incident after receiving samples of stolen data, including home addresses and phone numbers for FBI agents and their spouses. The publication verified these details against public records, confirming the authenticity of the breach. In statements provided to 404 Media, ShinyHunters denied acting for financial gain, demanding instead that the Bureau remove a report containing what they describe as false allegations against the group.
The hackers claimed to have breached an Oracle PeopleSoft server, a platform commonly utilized by human resources departments for storing applicant information, before pivoting to an Amazon-hosted government cloud that holds agent and applicant data. ShinyHunters stated they secured terabytes of information but left open what actions they might take if their demands are not met.
Security experts warn that the stolen data poses a significant counterintelligence risk. Foreign spies could potentially use the information to coerce or extort FBI agents and their families into cooperation with adversarial governments.
Reports indicate the attackers defaced the FBI’s recruitment portal, which displayed messages stating the site was down for maintenance. The special agent applicant portal appeared similarly inaccessible at the time of publication.
The FBI declined to comment on the incident, as did representatives for ShinyHunters. This event marks the second known compromise of an FBI system this year. Earlier, unidentified hackers infiltrated a system used for managing real-time wiretaps and foreign intelligence warrants, raising concerns about potential exposure of surveillance targets. Additionally, FBI Director Kash Patel’s personal email was compromised by Handala, an Iran-backed hacking group acting in retaliation for U.S.-led strikes against Iran.
Second breach this year? At this point, it is hard to take their cyber defenses seriously. The FBI needs a complete IT overhaul immediately.
Leaving terabytes of sensitive data unencrypted in a cloud server is negligent. This feels like a staffing and training failure, not just a tech issue.
Wow, I had no idea ShinyHunters was targeting the FBI directly. I thought they focused on corporations. How did they breach Oracle PeopleSoft?
This is genuinely terrifying. Foreign spies could blackmail agents based on home addresses. The security gap is massive.