ShinyHunters Claims FBI Breach Exposed Data of All Employees and Applicants
ShinyHunters claims it stole FBI employee and applicant data via an unverified PeopleSoft zero-day; the FBI is investigating.
ShinyHunters claims it breached FBI-linked systems and stole personal data on nearly all employees and applicants, including names, addresses, phone numbers, dates of birth, and spouse details. The group showed a sample of about 5,000 purported personnel records; some matched public records, but that does not confirm an FBI origin or the full claim. It alleged an unverified Oracle PeopleSoft zero-day and later access to an Amazon-hosted government cloud, plus defacement of FBIjobs.gov. The FBI says it is investigating unauthorized activity on that site and has not verified the theft, its scope, or the entry method.
- ShinyHunters claims personal data on nearly all FBI employees and applicants.
- A sample of about 5,000 records was only partly matched to public data.
- Alleged access used an unverified PeopleSoft zero-day and a government cloud system.
- FBI says it is investigating FBIjobs.gov activity but has not confirmed theft.
- The group also claimed it defaced the FBI recruitment website.
- ATT&CK
- T1190 Exploit Public-Facing ApplicationT1491.002 External DefacementT1530 Data from Cloud Storage Object
- Threat actors
- ShinyHunters
- Victims
- FBI
- Countries
- United States
From the original article
2 min read at gbhackers.com
The cybercriminal group ShinyHunters has claimed to have breached systems linked to the FBI, obtaining highly sensitive information on “almost all” FBI employees and applicants. The FBI has confirmed that it is investigating claims of unauthorized activity affecting FBIjobs. gov but has not verified the alleged theft, its extent, or the attackers’ claimed entry method.
By Divya · gbhackers.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.