Hacking group ShinyHunters claims it breached the FBI, stole agents’ and applicants’ data
ShinyHunters says it stole FBI agent and applicant data via PeopleSoft and a government cloud.
ShinyHunters claimed on its leak site that it stole sensitive data on almost all FBI agents and people who applied for FBI jobs. 404 Media reviewed a sample of names, home addresses, and phone numbers for agents and their spouses and verified part of it against public records. The hackers said they breached an Oracle PeopleSoft server, pivoted into an Amazon-hosted government cloud, took terabytes of data, and defaced the FBI jobs portal, demanding removal of an FBI report rather than payment. The FBI had not commented; the report also notes an earlier intrusion into an FBI wiretap system and a separate Handala leak of Director Kash Patel's email.
- Leak-site claim covers nearly all FBI agents and applicants
- 404 Media verified some names, addresses, and phone numbers
- Intrusion path: Oracle PeopleSoft then Amazon government cloud
- Terabytes taken; jobs site defaced; demand is report removal
- FBI had not commented as of the report
- ATT&CK
- T1190 Exploit Public-Facing ApplicationT1530 Data from Cloud StorageT1491.002 Defacement: External DefacementT1048 Exfiltration Over Alternative Protocol
- Threat actors
- ShinyHuntersHandala
- Victims
- FBI
- Organizations
- FBI404 MediaTechCrunch
- Countries
- United StatesIran
From the original article
2 min read at techcrunch.com
The theft of agents' personal information could present a major counterintelligence threat, where agents and their families are extorted into cooperating with a foreign government.
By Zack Whittaker · techcrunch.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.