The Federal Bureau of Investigation has launched an aggressive investigation into a significant data breach that compromised sensitive personal information belonging to its workforce. The attack has been claimed by Shinyhunters, a notorious cybercriminal collective known for extortion schemes.
In a video message released on social media, Brett Leatherman, the assistant director of the FBI’s cyber division, issued a direct challenge to the perpetrators. “You know how to find us, and we know how to find you,” Leatherman stated, urging members of the loosely connected group to come forward voluntarily while they still have the option. “I suggest you reach out first while the choice is still yours,” he added.
According to the FBI, the breach involved the agency’s employment portal, FBIJobs.gov, and potentially accessed personally identifiable information (PII) of current and former staff. The bureau is currently determining whether the intrusion originated from a third-party software vendor or within the FBI’s own internal systems. A spokesperson confirmed that the agency is working around the clock and maintaining regular contact with potentially affected individuals.
While the full scope of the stolen data remains uncertain, independent verification by media outlets and threat intelligence researchers has confirmed the authenticity of some released materials. Following the attack, Shinyhunters posted a defacement message on the FBI’s job website before temporarily taking the site offline.
Current and former officials spoke to NPR on the condition of anonymity due to fears of retaliation. They described the potential scale of the breach as massive, estimating several terabytes of text files containing job applications, promotion records, sensitive posting details, family information, and medical data. These sources reported growing frustration among employees, particularly retirees, regarding the lack of timely communication from leadership, including FBI Director Kash Patel, about the extent of the impact and mitigation efforts.
Concerns have been raised about the safety of former undercover agents, who may require protection measures such as relocation assistance or identity changes if their confidential details are exposed. In response to criticism, the FBI told NPR that it issued bureau-wide communications within 24 hours of public reports of the breach, emphasizing that the security of its information and the safety of its workforce remain top priorities.
Retirees deserve better communication than this. Feeling left in the dark after sharing everything is frustrating.
I’m skeptical about the ‘aggressive investigation’ rhetoric. How many times have we heard this before with no arrests?
The mention of undercover agent safety is terrifying. If their identities are out, lives are at risk.
An attack on the FBI itself is pretty ironic. Shinyhunters really picked the right target to show off.