FBIjobs.gov (Product): news timeline & CVEs

ShinyHunters tells The Reg: We hacked the FBI to 'protect our business'

ShinyHunters says it stole FBI personnel files via an Oracle PeopleSoft zero-day to rebut an FBI bulletin.

ShinyHunters told The Register it breached FBIJobs.gov through an Oracle PeopleSoft zero-day, then accessed FBI-managed servers on AWS GovCloud and stole thousands of files on current, former, and prospective employees. Sample files reviewed by journalists reportedly include home addresses, phone numbers, emails, Social Security numbers, job titles, field offices, and emergency contacts. The FBI said it is investigating a claimed compromise of FBIJobs.gov and possible employee PII exposure, and that the entry point is still undetermined. The group said it sought no extortion payment and framed the intrusion as a response to a May 2026 FBI FLASH report.

The Register · Securityupdated Sep 26, 19:03 UTC · 13h agofirst Sep 25, 18:23 UTC · 1d agoData breach in the wild 21 sources

FBI Hack Exposed FBI’s Own Hacking Unit

ShinyHunters' FBIJobs.gov breach exposed personal data on about 5,000 FBI staff, including Remote Operations Unit members.

404 Media reports ShinyHunters shared records on about 5,000 alleged FBI officials, including addresses, phone numbers, job titles, and in some cases spouses. Three entries reference remote operations units, the FBI hacking team historically associated with dark-web network investigative techniques. The FBI said it is investigating a claimed compromise of the FBIJobs.gov portal and has not determined whether the entry point was a third party or FBI systems. Reuters reported some titles relate to China or Russia investigations, and 404 Media said it verified portions of the data.

404 Mediaupdated Sep 26, 19:03 UTC · 13h agofirst Sep 23, 22:15 UTC · 3d agoData breach in the wild 21 sources

FBI investigating alleged ShinyHunters breach of its jobs site

The FBI is investigating a breach of its jobs website by the ShinyHunters group, which claims to have stolen data on agents and applicants.

The FBI is investigating a breach of its job applications website, FBIjobs.gov, by the ShinyHunters cybercriminal group. The group defaced the website and claimed to have stolen information on current and former employees and applicants, providing samples of 5,000 FBI agent records to verify the claim. The breach is linked to a dispute over an FBI public service announcement that ShinyHunters says contains false claims about its activities.

The Recordupdated Sep 26, 19:03 UTC · 13h agofirst Sep 23, 14:22 UTC · 3d agoData breach 21 sources

ShinyHunters claims FBI breach after alleged PeopleSoft zero-day attack

ShinyHunters claims to have breached the FBI via a PeopleSoft zero-day, stealing employee data as retaliation for a prior law enforcement advisory.

The ShinyHunters cybercrime group claims to have breached the U.S. FBI, allegedly using an Oracle PeopleSoft zero-day to steal 2-3 TB of data, including employee and applicant PII. The FBI is investigating the claim but has not confirmed a compromise. ShinyHunters states the attack was a response to a May 2026 FBI advisory, using the alleged breach as leverage to demand a retraction.

Security Affairsupdated Sep 26, 19:03 UTC · 13h agofirst Sep 23, 13:56 UTC · 3d agoData breach 21 sources CVE-2026-35273

ShinyHunters Claims FBI Breach Exposed Data of All Employees and Applicants

ShinyHunters claims it stole FBI employee and applicant data via an unverified PeopleSoft zero-day; the FBI is investigating.

ShinyHunters claims it breached FBI-linked systems and stole personal data on nearly all employees and applicants, including names, addresses, phone numbers, dates of birth, and spouse details. The group showed a sample of about 5,000 purported personnel records; some matched public records, but that does not confirm an FBI origin or the full claim. It alleged an unverified Oracle PeopleSoft zero-day and later access to an Amazon-hosted government cloud, plus defacement of FBIjobs.gov. The FBI says it is investigating unauthorized activity on that site and has not verified the theft, its scope, or the entry method.

GBHackersupdated Sep 26, 19:03 UTC · 13h agofirst Sep 23, 05:06 UTC · 4d agoData breach 21 sources

ShinyHunters Allegedly Claims Breach of FBI Jobs Site and Stolen Agents’ Data

ShinyHunters claims it breached FBI jobs systems, defaced the portal, and stole personnel records; the FBI is investigating.

The FBI said it is investigating claims of unauthorized activity affecting FBIjobs.gov after apply.fbijobs.gov briefly showed a ShinyHunters seizure notice and the bureau took the jobs application service and Special Agent Applicant Portal offline. ShinyHunters told reporters it exploited an undisclosed unauthenticated remote-code-execution flaw in Oracle PeopleSoft, moved into FBI-managed AWS GovCloud, and downloaded two to three terabytes, including HR and medical-related data. A sample of 5,000 purported employee records included names, addresses, phone numbers, Social Security numbers, assignments, dates of birth, and relative details; Reuters partially matched at least 10 cases, but neither Reuters nor 404 Media proved the sample came from FBI systems. Oracle, AWS, and the FBI have not validated that account, and the wider breach remains unproven.

Cyber Security Newsupdated Sep 26, 19:03 UTC · 13h agofirst Sep 23, 02:43 UTC · 4d agoData breach in the wild 21 sources

FBIjobs.gov

Timeline6 articles

Related CVEsby mentions

Appears with