← Latest briefing

US News

Hackers claim breach of FBI systems and theft of employee records

Cybercriminal group ShinyHunters claims it accessed government cloud servers and stole terabytes of personal data.

The short version

  • Hacking group ShinyHunters claims to have breached FBI-related systems and exfiltrated two to three terabytes of personal data covering agency personnel and applicants.[TechCrunch · Hacker News]
  • A sample of stolen data reviewed by reporters included names, addresses, phone numbers, and dates of birth, some of which were verified against public records.[Hacker News]
  • The hackers defaced the FBI jobs website and demanded the agency remove a report about the group within one week.[TechCrunch · Hacker News]
  • The FBI stated that it is aware of reported unauthorized activity affecting FBIjobs.gov and is actively investigating the incident.[TechCrunch · Hacker News]

Key facts

  • ShinyHunters claimed responsibility for breaching FBI recruitment services and taking up to three terabytes of data on personnel and applicants.[TechCrunch · Hacker News]
  • A sample file provided by the group contained personal details for approximately 5,000 employees, including phone numbers verified to match U.S. Department of Justice personnel.[Hacker News]
  • The group stated it accessed AWS GovCloud servers using a zero-day exploit in Oracle PeopleSoft software.[TechCrunch · Hacker News]
  • The FBI jobs website and Special Agent Applicant Portal showed outage messages following the incident.[TechCrunch · Hacker News]
  • ShinyHunters demanded that the FBI remove or correct a report containing allegations against the group within one week.[TechCrunch · Hacker News]

What remains uncertain

  • The full scope of the breach and whether all FBI employee records were compromised remain unverified by official sources.[TechCrunch · Hacker News]
  • The FBI acknowledged claims of unauthorized activity affecting FBIjobs.gov but has not independently confirmed the extent of the stolen data.[Hacker News]

Sources

Outlet counts describe coverage, not independent confirmation. Reports may share a wire service or original source.