US News
Hackers claim breach of FBI systems and theft of employee records
Cybercriminal group ShinyHunters claims it accessed government cloud servers and stole terabytes of personal data.
The short version
- Hacking group ShinyHunters claims to have breached FBI-related systems and exfiltrated two to three terabytes of personal data covering agency personnel and applicants.[TechCrunch · Hacker News]
- A sample of stolen data reviewed by reporters included names, addresses, phone numbers, and dates of birth, some of which were verified against public records.[Hacker News]
- The hackers defaced the FBI jobs website and demanded the agency remove a report about the group within one week.[TechCrunch · Hacker News]
- The FBI stated that it is aware of reported unauthorized activity affecting FBIjobs.gov and is actively investigating the incident.[TechCrunch · Hacker News]
Key facts
- ShinyHunters claimed responsibility for breaching FBI recruitment services and taking up to three terabytes of data on personnel and applicants.[TechCrunch · Hacker News]
- A sample file provided by the group contained personal details for approximately 5,000 employees, including phone numbers verified to match U.S. Department of Justice personnel.[Hacker News]
- The group stated it accessed AWS GovCloud servers using a zero-day exploit in Oracle PeopleSoft software.[TechCrunch · Hacker News]
- The FBI jobs website and Special Agent Applicant Portal showed outage messages following the incident.[TechCrunch · Hacker News]
- ShinyHunters demanded that the FBI remove or correct a report containing allegations against the group within one week.[TechCrunch · Hacker News]
What remains uncertain
- The full scope of the breach and whether all FBI employee records were compromised remain unverified by official sources.[TechCrunch · Hacker News]
- The FBI acknowledged claims of unauthorized activity affecting FBIjobs.gov but has not independently confirmed the extent of the stolen data.[Hacker News]
Sources
Outlet counts describe coverage, not independent confirmation. Reports may share a wire service or original source.