ShinyHunters Claims FBI Hack, Demands Retraction of Threat Report
ShinyHunters claims it breached FBI systems via a PeopleSoft zero-day, stealing 2-3 TB of agent and applicant data, and defaced fbijobs.gov.
ShinyHunters claims to have compromised FBI Criminal Justice, HR, and Medlink services and stolen 2-3 TB of data covering nearly all FBI agents and job applicants, allegedly by exploiting an Oracle PeopleSoft zero-day tracked as CVE-2026-35273. The group defaced a fbijobs.gov subdomain with a seizure message and gave the FBI one week to retract a May FLASH report alleging harassment and swatting tactics. A data sample of 5,000 FBI employees shared with 404 Media, including names, phone numbers and addresses, appeared at least partially authentic. The FBI said it is investigating the claims against FBIjobs.gov.
- ShinyHunters claims theft of 2-3 TB of FBI data on agents and applicants via PeopleSoft zero-day CVE-2026-35273
- Defaced fbijobs.gov subdomain displays seizure message and one-week retraction demand
- Sample of 5,000 employee records reviewed by 404 Media appears at least partially authentic
- FBI confirms it is investigating unauthorized activity affecting FBIjobs.gov
- CVEs
- CVE-2026-35273
- Threat actors
- ShinyHunters
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2026-35273 | Unauthenticated Takeover Flaw in Oracle PeopleSoft Enterprise PeopleTools | 9.8 | 97% | KEVRansomwarePoC | KEV |
From the original article
2 min read at securityweek.com
The cybercrime group is unhappy with its description in an FBI report and threatens to leak stolen information. The post ShinyHunters Claims FBI Hack, Demands Retraction of Threat Report appeared first on SecurityWeek.
By Eduard Kovacs · securityweek.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.