‘We Hacked the FBI:’ Hackers Say They Have Data on All FBI Employees
ShinyHunters claims a PeopleSoft zero-day breach exposing personal data on FBI employees and applicants.
ShinyHunters told 404 Media it breached FBI-related services with a zero-day in Oracle PeopleSoft, reached AWS GovCloud, and downloaded 2–3 terabytes. The group says the haul includes names, home addresses, phone numbers, dates of birth, and spouse details for FBI employees and applicants, plus PII and PHI on former staff. It provided a sample of about 5,000 records; some phone numbers matched the listed names in OSINT checks. The FBI jobs site was defaced and remained unavailable, and the FBI had not commented. The actors described the goal as coercion rather than a ransom demand.
- ShinyHunters claims data on all FBI employees and applicants, including spouses.
- Sample of 5,000 records listed addresses, phones, birth dates, and spouse details.
- 404 Media linked some phone numbers to matching names using OSINT Industries.
- Group cites an Oracle PeopleSoft zero-day, then AWS GovCloud access and 2–3 TB downloaded.
- FBI jobs site was defaced and stayed down; FBI had not commented.
Full article540 words · extracted from 404media.co · click to collapse
A high profile hacking group claims it has breached multiple FBI-related services and stolen data “on all FBI employees and applicants.” A representative of the group, called ShinyHunters, told 404 Media the data includes FBI agents’ names, home addresses, phone number, and information on their spouse.
The data breach could be massively significant and may have all sorts of national security and counterintelligence implications. Criminals from the same ecosystem as ShinyHunters have previously used hacked data like phone records to track, intimidate, and harass the FBI agents investigating them. The highly sensitive data could also be a boon to foreign intelligence agencies who want to better understand how one of the most important law enforcement and intelligence agencies in the U.S. operates. And if the data fell into the hands of more criminals, FBI agents and their spouses could face serious threats to their safety.
“We hacked the FBI. We hold data on all FBI employees and applicants,” the representative of the group told 404 Media.
The representative provided 404 Media with a sample appearing to contain the personal data of 5,000 FBI employees. That data included an alleged address, phone number, date of birth, and in some cases details on their spouse.
404 Media put some of the sample phone numbers into open source intelligence tool OSINT Industries and found they did correspond to people with the same name as listed in the sample file.
ShinyHunters also defaced the FBI jobs website on Tuesday. That defacement says, “this site has been seized by ShinyHunters,” which is an obvious nod to the seizure notices the FBI and other law enforcement agencies often put on sites after taking them down. The representative said ShinyHunters carried out the hack on Monday night. At the time of writing, the FBI jobs website says, “Apply.fbijobs.gov and the Special Agent Applicant Portal are currently unavailable.”
The defacement adds, “All FBI data was compromised including PII/PHI [personally identifiable information and protected health information] on incumbent and former FBI employees and all applicant information. We have a lot more than we claim here.”
The announcement ended with another obvious jibe at the administration, this time mocking President Trump’s Truth Social post style: “Thank you for your attention to this matter.”
The FBI did not immediately respond to a request for comment.
The representative said ShinyHunters said the group used a zero day exploit in an Oracle product called PeopleSoft. From there, the group managed to access AWS GovCloud servers and downloaded data. The representative said the exfiltrated data totalled between two and three terabytes.
Typically, ShinyHunters hacks targets and then attempts to extort them. The group threatens to publicly release more compromised data if the victim organization or company doesn’t pay a hefty fee. Obviously, it is unlikely that the FBI would ever pay a ransom like this.
When asked if ShinyHunters was going to attempt to extort the FBI, the representative said, “what we plan to do is not something I’d call extortion, maybe coercion.”
“This is not financially motivated,” they added.
About the author
Joseph is an award-winning investigative journalist focused on generating impact. His work has triggered hundreds of millions of dollars worth of fines, shut down tech companies, and much more.
