ShinyHunters Allegedly Claims Breach of FBI Jobs Site and Stolen Agents’ Data
ShinyHunters claims it breached FBI jobs systems, defaced the portal, and stole personnel records; the FBI is investigating.
The FBI said it is investigating claims of unauthorized activity affecting FBIjobs.gov after apply.fbijobs.gov briefly showed a ShinyHunters seizure notice and the bureau took the jobs application service and Special Agent Applicant Portal offline. ShinyHunters told reporters it exploited an undisclosed unauthenticated remote-code-execution flaw in Oracle PeopleSoft, moved into FBI-managed AWS GovCloud, and downloaded two to three terabytes, including HR and medical-related data. A sample of 5,000 purported employee records included names, addresses, phone numbers, Social Security numbers, assignments, dates of birth, and relative details; Reuters partially matched at least 10 cases, but neither Reuters nor 404 Media proved the sample came from FBI systems. Oracle, AWS, and the FBI have not validated that account, and the wider breach remains unproven.
- Jobs portal briefly showed a ShinyHunters seizure notice; FBI took it offline.
- Group alleges unauthenticated PeopleSoft RCE and 2–3 TB theft from AWS GovCloud.
- Sample of 5,000 records includes SSNs, addresses, assignments, and family details.
- Partial media checks did not prove the sample came from FBI systems.
- Oracle, AWS, and the FBI have not confirmed the intrusion method.
- ATT&CK
- T1190 Exploit Public-Facing ApplicationT1491.002 External DefacementT1530 Data from Cloud Storage Object
- Vendors
- OracleAmazon Web Services
- Threat actors
- ShinyHunters
- Victims
- FBI
- Organizations
- FBIOracleAmazon Web ServicesReuters
- Countries
- United States
From the original article
3 min read at cybersecuritynews.com
The FBI is investigating alleged unauthorized activity affecting its recruitment infrastructure after the ShinyHunters cybercrime group claimed it breached FBI systems, defaced the bureau’s jobs portal, and stole sensitive records belonging to employees and applicants. The incident places the data-extortion operation in direct confrontation with the federal agency responsible for investigating cybercrime.
By Guru Baran · cybersecuritynews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.