ShinyHunters Claims It Breached FBI and Stole Agents’ Personal Data

Cybercrime group ShinyHunters claims it breached the FBI and stole sensitive information belonging to thousands of agents and people who applied for jobs at the agency. TechCrunch first reported the alleged breach.

The hackers posted the claim on their dark web leak site, saying they obtained data on “almost all FBI agents” as well as a substantial amount of information belonging to FBI job applicants. The alleged stolen information includes names, home addresses and phone numbers of agents and their spouses, according to data samples reviewed by 404 Media and cited by TechCrunch.

The attackers reportedly gained access through an Oracle PeopleSoft server commonly used for human resources and recruitment functions before moving into an Amazon-hosted government cloud environment. ShinyHunters claims to have taken terabytes of data, although the full scope of the alleged theft has not been independently established.

The group said the attack was not financially motivated and demanded that the FBI remove a report it claims contains false allegations about ShinyHunters. The hackers have not publicly disclosed exactly what they plan to do with the data.

The potential exposure of agents’ personal information could create serious security risks, particularly if the information were used for harassment, coercion or attempts to identify and target FBI personnel and their families.

The FBI confirmed to TechCrunch that it is aware of claims involving unauthorized activity affecting FBIjobs.gov and is investigating. The agency has not confirmed that ShinyHunters successfully accessed the broader datasets claimed by the group.

The alleged incident would be the second known breach involving an FBI system this year, adding to concerns over the security of sensitive government infrastructure.