The United States Federal Bureau of Investigation confirmed it is probing a cybersecurity incident involving its employment website, fbijobs.gov. A hacking collective known as ShinyHunters has asserted responsibility for the attack, alleging that it exfiltrated detailed personal information belonging to thousands of current and former agents.
In a statement released Wednesday, the agency acknowledged awareness of the cybercriminal enterprise’s claims. “The FBI is aware of a cybercriminal enterprise group claiming a compromise of the fbijobs.gov portal and alleged impact to FBI employee personally identifiable information,” the statement read.
Bureau officials noted that the exact origin of the intrusion has not yet been established. Investigators are determining whether the breach originated within FBI infrastructure or through a third-party vendor. The agency stated it is “actively and aggressively investigating” the matter and collaborating with external providers supporting the jobs portal to mitigate potential risks.
According to Reuters, journalists have examined portions of the alleged stolen dataset, which ShinyHunters describes as ranging between two and three terabytes. The data reportedly contains granular details regarding the job assignments of numerous officials, including information related to covert operations against Chinese espionage, Russian intelligence services, and drug trafficking organizations.
ShinyHunters announced on Tuesday that it had seized the data and is withholding it until the FBI retracts a statement issued in May that described the group as threat actors. That earlier FBI characterization warned that such groups often use exaggerated or fabricated claims of accessing sensitive materials to extort payments from victims.
While attempting to prevent the widespread circulation of the personnel information, the hacking group has maintained its demand for the rescinded statement. The FBI previously cautioned that threat actors may falsely claim possession of compromising material, including embarrassing photographs or videos that often do not exist.
This incident follows a series of recent security challenges for the bureau. In March, the FBI disclosed an investigation into suspicious activities on an internal system housing sensitive surveillance data. The same month, a pro-Iranian hacktivist group claimed to have compromised the account of FBI Director Kash Patel, leaking what appeared to be older photographs, a work resume, and personal documents dating back more than a decade.
As of Wednesday afternoon, the fbijobs.gov portal remained offline while the investigation continues.
At this point, I’m starting to wonder if the FBI has any robust cybersecurity measures in place at all.
Two to three terabytes of data? That’s a massive leak. I wonder how many people’s identities are at risk here?
I find it suspicious that ShinyHunters wants a statement retracted. Doesn’t that sound like standard extortion tactics?
Why does the FBI keep having security lapses? How do they protect anything if they can’t even secure a jobs portal?
This is incredibly concerning. Covert operation details being potentially exposed is a serious national security risk.