ShinyHunters says FBI hack aimed to counter harassment claims
This digest was compiled by AI from multiple sources — links to the originals are below.
ShinyHunters told The Register it breached FBIJobs.gov to contest the FBI's May 2026 FLASH report accusing the group of harassment and swatting. The FBI confirmed the breach on Friday and said it is investigating the compromise of employee personally identifiable information. The group claims it stole sensitive data on nearly all FBI agents and job applicants, including home addresses and Social Security numbers.
Key Facts
- ShinyHunters told The Register the FBI breach was executed to contest allegations in the FBI's May 2026 FLASH report.
- The FBI confirmed the breach on Friday and said the point of compromise is still undetermined.
- ShinyHunters claims it accessed FBIJobs.gov via an Oracle PeopleSoft zero-day and stole data from AWS GovCloud servers.
- Sample files reviewed by journalists and researchers appear to contain agents' home addresses, phone numbers, emails, Social Security numbers, and emergency contacts.
Breach Method and Scope
ShinyHunters said it broke into the FBIJobs.gov portal using an Oracle PeopleSoft zero-day flaw. The group then breached the FBI's managed servers on AWS GovCloud and stole thousands of personnel files. The stolen data allegedly includes information on current, former, and prospective FBI employees. FBIJobs.gov remained down as of Friday, according to The Register.
FBI Response and Investigation
An FBI spokesperson told The Register the bureau is aware of a cyber-criminal group claiming compromise of FBIJobs.gov. The FBI said it is actively investigating whether the breach occurred through a third-party or the FBI's own enterprise. The bureau is working with third-party providers that support FBIJobs.gov to mitigate risk.
1 source
Time · lag behind first