‘We Hacked the FBI:’ Hackers Say They Have Data on All FBI Employees
ShinyHunters claims a PeopleSoft zero-day breach exposing personal data on FBI employees and applicants.
ShinyHunters told 404 Media it breached FBI-related services with a zero-day in Oracle PeopleSoft, reached AWS GovCloud, and downloaded 2–3 terabytes. The group says the haul includes names, home addresses, phone numbers, dates of birth, and spouse details for FBI employees and applicants, plus PII and PHI on former staff. It provided a sample of about 5,000 records; some phone numbers matched the listed names in OSINT checks. The FBI jobs site was defaced and remained unavailable, and the FBI had not commented. The actors described the goal as coercion rather than a ransom demand.
- ShinyHunters claims data on all FBI employees and applicants, including spouses.
- Sample of 5,000 records listed addresses, phones, birth dates, and spouse details.
- 404 Media linked some phone numbers to matching names using OSINT Industries.
- Group cites an Oracle PeopleSoft zero-day, then AWS GovCloud access and 2–3 TB downloaded.
- FBI jobs site was defaced and stayed down; FBI had not commented.
- ATT&CK
- T1190 Exploit Public-Facing ApplicationT1213 Data from Information RepositoriesT1491.002 External Defacement
- Vendors
- OracleAmazon Web Services
- Products
- PeopleSoftAWS GovCloud
- Threat actors
- ShinyHunters
- Victims
- FBI
- Countries
- United States
From the original article
2 min read at 404media.co
A sample of 5,000 alleged agents seen by 404 Media includes names, addresses, phone numbers, and details on FBI employees' spouses.
By Joseph Cox · 404media.co
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.