FBI Tells Employees to Assume ShinyHunters Stole Personal Data

The Federal Bureau of Investigation (FBI) has told employees to assume their personal information was stolen in a breach claimed by the hacking group ShinyHunters.

ShinyHunters claims it accessed nearly 2–3 terabytes of data from FBIjobs.gov, including information linked to almost all FBI agents and job applicants. The group says the material contains names, phone numbers, addresses and some information about employees’ spouses.

The FBI is investigating the incident but has not confirmed either the amount of data involved or the method used to gain access. ShinyHunters claims it entered the system through a previously unknown vulnerability in Oracle PeopleSoft.

On Sept. 29, FBI cyber chief Brett Leatherman referred to an earlier Dutch police arrest operation involving the group and urged ShinyHunters to contact the agency. The group later said it would not release the allegedly stolen data.

The FBI’s warning reflects the agency’s response while investigators determine whether the information was actually taken.