AWS GovCloud (Product): news timeline & CVEs

ShinyHunters tells The Reg: We hacked the FBI to 'protect our business'

ShinyHunters says it stole FBI personnel files via an Oracle PeopleSoft zero-day to rebut an FBI bulletin.

ShinyHunters told The Register it breached FBIJobs.gov through an Oracle PeopleSoft zero-day, then accessed FBI-managed servers on AWS GovCloud and stole thousands of files on current, former, and prospective employees. Sample files reviewed by journalists reportedly include home addresses, phone numbers, emails, Social Security numbers, job titles, field offices, and emergency contacts. The FBI said it is investigating a claimed compromise of FBIJobs.gov and possible employee PII exposure, and that the entry point is still undetermined. The group said it sought no extortion payment and framed the intrusion as a response to a May 2026 FBI FLASH report.

The Register · Securityupdated Sep 26, 19:03 UTC · 13h agofirst Sep 25, 18:23 UTC · 1d agoData breach in the wild 21 sources

ShinyHunters Claims FBI Hack Via PeopleSoft Zero Day

ShinyHunters claims FBI breach via PeopleSoft zero-day, alleging theft of data on 5000 employees.

ShinyHunters claims to have breached the FBI via a zero-day vulnerability in Oracle PeopleSoft, allegedly stealing data on 5000 FBI employees and applicants. The group posted a data sample and claims to have pivoted to AWS GovCloud servers, downloading 2-3TB of data. The attack appears motivated by retaliation for an FBI public service announcement, with the group also defacing the FBI jobs website.

Infosecurity Magazineupdated Sep 26, 19:03 UTC · 13h agofirst Sep 23, 10:00 UTC · 3d agoData breach 21 sources

ShinyHunters Claims FBI Breach Exposed Data of All Employees and Applicants

ShinyHunters claims it stole FBI employee and applicant data via an unverified PeopleSoft zero-day; the FBI is investigating.

ShinyHunters claims it breached FBI-linked systems and stole personal data on nearly all employees and applicants, including names, addresses, phone numbers, dates of birth, and spouse details. The group showed a sample of about 5,000 purported personnel records; some matched public records, but that does not confirm an FBI origin or the full claim. It alleged an unverified Oracle PeopleSoft zero-day and later access to an Amazon-hosted government cloud, plus defacement of FBIjobs.gov. The FBI says it is investigating unauthorized activity on that site and has not verified the theft, its scope, or the entry method.

GBHackersupdated Sep 26, 19:03 UTC · 13h agofirst Sep 23, 05:06 UTC · 4d agoData breach 21 sources

ShinyHunters Allegedly Claims Breach of FBI Jobs Site and Stolen Agents’ Data

ShinyHunters claims it breached FBI jobs systems, defaced the portal, and stole personnel records; the FBI is investigating.

The FBI said it is investigating claims of unauthorized activity affecting FBIjobs.gov after apply.fbijobs.gov briefly showed a ShinyHunters seizure notice and the bureau took the jobs application service and Special Agent Applicant Portal offline. ShinyHunters told reporters it exploited an undisclosed unauthenticated remote-code-execution flaw in Oracle PeopleSoft, moved into FBI-managed AWS GovCloud, and downloaded two to three terabytes, including HR and medical-related data. A sample of 5,000 purported employee records included names, addresses, phone numbers, Social Security numbers, assignments, dates of birth, and relative details; Reuters partially matched at least 10 cases, but neither Reuters nor 404 Media proved the sample came from FBI systems. Oracle, AWS, and the FBI have not validated that account, and the wider breach remains unproven.

Cyber Security Newsupdated Sep 26, 19:03 UTC · 13h agofirst Sep 23, 02:43 UTC · 4d agoData breach in the wild 21 sources

ShinyHunters claims FBI hack: 'This is NOT financially motivated'

ShinyHunters claims an Oracle PeopleSoft zero-day let it steal 2–3 TB of FBI employee data.

ShinyHunters told The Register it exploited an Oracle PeopleSoft pre-authentication remote-code-execution zero-day on the FBI jobs website, defaced the page, and moved laterally to FBI systems on AWS GovCloud. The group claims it took about 2 to 3 terabytes on current, former, and prospective employees, including human resources, MedLink, and Criminal Justice Information Services. It says it is not seeking payment and instead wants the FBI to retract a May 15 bulletin alleging harassment, swatting, and false extortion claims. The FBI, Oracle, and AWS had not responded or confirmed the allegations at publication.

The Register · Securityupdated Sep 26, 19:03 UTC · 13h agofirst Sep 22, 17:24 UTC · 4d agoData breach 21 sources

‘We Hacked the FBI:’ Hackers Say They Have Data on All FBI Employees

ShinyHunters claims a PeopleSoft zero-day breach exposing personal data on FBI employees and applicants.

ShinyHunters told 404 Media it breached FBI-related services with a zero-day in Oracle PeopleSoft, reached AWS GovCloud, and downloaded 2–3 terabytes. The group says the haul includes names, home addresses, phone numbers, dates of birth, and spouse details for FBI employees and applicants, plus PII and PHI on former staff. It provided a sample of about 5,000 records; some phone numbers matched the listed names in OSINT checks. The FBI jobs site was defaced and remained unavailable, and the FBI had not commented. The actors described the goal as coercion rather than a ransom demand.

404 Mediaupdated Sep 26, 19:03 UTC · 13h agofirst Sep 22, 16:48 UTC · 4d agoData breach in the wild 21 sources1

AWS GovCloud

Timeline6 articles

Appears with