< Back to all clusters
[TECHNOLOGY] · United States · 19 sources

started · updated

FBI confirms major cybersecurity incident following ShinyHunters data breach

The FBI has confirmed a major cybersecurity incident involving its recruitment portal, FBIJobs.gov. The hacking group ShinyHunters claims responsibility, alleging they have exfiltrated between 2 and 3 terabytes of data, potentially affecting tens of thousands of current and former employees, as well as job applicants.

The breach reportedly exploited a vulnerability in an Oracle PeopleSoft server. Stolen information includes highly sensitive personal data such as Social Security numbers, home addresses, phone numbers, and badge numbers. Crucially, the breach appears to have compromised medical and psychiatric records, including results from fitness-for-work examinations.

Reports indicate that the stolen data includes details on personnel within sensitive units, such as the Remote Operations Unit and staff involved in operations related to China and Russia. The group has stated the attack was not financially motivated but was a response to a May 2026 FBI public advisory regarding their methods. They are demanding the FBI retract or remove the advisory.

The FBI has temporarily taken the recruitment site offline and is investigating whether the compromise occurred within its own systems or through a third-party provider. Internal communications suggest the agency is working to assess the full extent of the damage and the impact on personnel security.

Entities

AWS GovCloud · AWS GovCloud · Barrington Police Department · Brett Leatherman · FBI · Federal Bureau of Investigation · Kash Patel · Oracle · Pennsylvania State Police · ShinyHunters

Claims

What the coverage asserts, and how many sources carry each claim.

Sources