World News
Patel says FBI arrested accused ShinyHunters co-conspirator over jobs portal breach
Director Kash Patel says the breach involved a third-party vendor platform, while the suspect's identity and charges remain unclear.
The short version
- FBI Director Kash Patel said the bureau arrested an accused co-conspirator of the ShinyHunters hacking group.[Associated Press]
- The group reportedly claimed it breached the FBI jobs portal and obtained data on nearly all employees; Patel said the breach occurred on a third-party vendor platform.[Associated Press]
- A contractor reportedly failed to apply a required security patch, and the FBI says it has removed that contractor.[CBS News]
- The suspect's identity and charges were not immediately clear, and anonymous sources say the suspect was detained in Pennsylvania and other co-conspirators remain at large.[Associated Press · CBS News]
Key facts
- The FBI arrested an accused co-conspirator of the ShinyHunters hacking group, according to FBI Director Kash Patel.[Associated Press]
- Patel said the breach occurred on a platform managed by a third-party vendor.[Associated Press]
- ShinyHunters claimed it obtained sensitive personal data on nearly all FBI employees and said its action responded to an FBI public advisory from May.[Associated Press]
- The identity of the arrested person and the charges they might face were not immediately clear.[Associated Press]
- Experts said the exposed data could enable extortion, swatting and harassment of FBI agents and their families, and spouse identities were also reportedly obtained.[Associated Press]
- FBI Cyber Division Assistant Director Brett Leatherman said a contractor failed to implement a required security patch, and the FBI has removed the contractor.[CBS News]
- ShinyHunters claimed it stole 2 to 3 terabytes of FBI employee data by exploiting a new vulnerability in Oracle PeopleSoft.[CBS News]
- Anonymous sources told CBS News the suspect was detained in Pennsylvania and is a Canadian citizen.[CBS News]
What remains uncertain
- The arrested suspect's identity and charges have not been publicly confirmed in the cited reporting.[Associated Press · CBS News]
- The suspect's direct role in the hack and the status of other co-conspirators rest on anonymous law enforcement sources.[CBS News]
- The scope of data taken, including ShinyHunters' claims about nearly all employees and 2 to 3 terabytes, is unverified.[Associated Press · CBS News]
- The contractor's employer was reported as Accenture, a detail attributed to Reuters and not confirmed in the cited CBS reporting.[CBS News]
Sources
Outlet counts describe coverage, not independent confirmation. Reports may share a wire service or original source.
- FBI arrests suspect in ShinyHunters hack of the bureau’s jobs portalAssociated Press · Wire: associated-press
- FBI arrests suspected member of ShinyHunters in connection with jobs site hackCBS News - US