ShinyHunters claims FBI breach after alleged PeopleSoft zero-day attack
ShinyHunters claims to have breached the FBI via a PeopleSoft zero-day, stealing employee data as retaliation for a prior law enforcement advisory.
The ShinyHunters cybercrime group claims to have breached the U.S. FBI, allegedly using an Oracle PeopleSoft zero-day to steal 2-3 TB of data, including employee and applicant PII. The FBI is investigating the claim but has not confirmed a compromise. ShinyHunters states the attack was a response to a May 2026 FBI advisory, using the alleged breach as leverage to demand a retraction.
- ShinyHunters claims to have breached the FBI using a PeopleSoft zero-day.
- The group alleges stealing 2-3 TB of data, including employee and applicant PII.
- ShinyHunters links the attack to a past FBI advisory, demanding it be retracted.
- The FBI is investigating but has not confirmed the breach or data theft.
- The claim is plausible as ShinyHunters previously exploited a real PeopleSoft zero-day (CVE-2026-35273).
- CVEs
- CVE-2026-35273
- Vendors
- Oracle
- Products
- Oracle PeopleSoftFBIjobs.gov
- Threat actors
- ShinyHunters
- Victims
- FBI
- Organizations
- ShinyHuntersFBI
- Countries
- United States
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2026-35273 | Unauthenticated Takeover Flaw in Oracle PeopleSoft Enterprise PeopleTools | 9.8 | 97% | KEVRansomwarePoC | KEV |
From the original article
3 min read at securityaffairs.com
ShinyHunters claims FBI breach via PeopleSoft zero-day, steals staff data; FBI investigating, no confirmation yet. The popular cybercrime group ShinyHunters is claiming that it breached the U. S.
By Pierluigi Paganini · securityaffairs.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.