Cybercriminal group claims to steal thousands of FBI employee records
The FBI fired an Accenture contractor after an unapplied patch allowed the ShinyHunters cybercrime group to breach FBIjobs.gov. The group claims to have stolen 2.3TB of data, including records for the majority of current and former employees. While the FBI is investigating unauthorized activity on the jobs website, it has not verified the full scope of the theft. Law enforcement has arrested multiple suspected group members, including a Canadian executive in Pennsylvania and a 24-year-old Dutch man identified as a group leader.
Listen to Live Briefing
Real-time synthesized voice briefing · Live Feeds Desk
- ✓ The FBI is investigating unauthorized activity affecting FBIjobs.gov.
- ✓ ShinyHunters claims to have breached FBI systems connected to the bureau's jobs website.
- ✓ Federal agents arrested a Canadian cybersecurity executive in Pennsylvania on October 9.
What changed
The FBI removed an Accenture contractor responsible for the security flaw and arrested a suspected group leader in the Netherlands.
Live updates
-
FBI removes contractor after ShinyHunters breach of employment site
The FBI fired an Accenture contractor after an unapplied patch allowed the ShinyHunters cybercrime group to breach FBIjobs.gov. The group claims to have stolen 2.3TB of data, including records for the majority of current and former employees. While the FBI is investigating unauthorized activity on the jobs website, it has not verified the full scope of the theft. Law enforcement has arrested multiple suspected group members, including a Canadian executive in Pennsylvania and a 24-year-old Dutch man identified as a group leader.
Why it matters
This breach targets the personal data of federal agents, including home addresses and spouse details. The attack follows a pattern of extortion by ShinyHunters, who claim the motive was personal.
What is confirmed
- The FBI is investigating unauthorized activity affecting FBIjobs.gov.
- ShinyHunters claims to have breached FBI systems connected to the bureau's jobs website.
- Federal agents arrested a Canadian cybersecurity executive in Pennsylvania on October 9.
Still unconfirmed
- ShinyHunters stole 2.3TB of data.
- The stolen data includes records for the majority of the FBI's current and former employees.
- The group provided a sample containing records for about 5,000 FBI personnel to 404 Media.
- A 24-year-old Dutch man identified as a ShinyHunters leader was arrested.
- The breach occurred because of an unapplied patch by an Accenture contractor.
What to watch next
- FBI confirmation of the total volume of stolen data
- Court filings regarding the Dutch and Canadian suspects
- Official statement from Accenture regarding the contractor's role
confidence 70%Sources used for this update (6)
- ticklethewire.com — FBI Investigates Possible Breach After Hackers Claim They Stole Agent Data
- dailysecurityreview.com — FBI Drops Accenture Contractor After ShinyHunters PeopleSoft ...
- www.wionews.com — FBI strikes back at ShinyHunters after alleged hack, arrests ...
- www.europesays.com — Hacking group purports to have stolen FBI employee data in ...
- www.metacurity.com — Trump appointees asked CISA to secretly hack a voting machine and not reveal the results, report - Metacurity
- www.wionews.com — FBI hacked? Hacking group ShinyHunters claims to 'have ... - WION
-
FBI Arrests Canadian Executive in ShinyHunters Data Breach
Federal law enforcement agents arrested a Canadian cybersecurity executive and ransomware expert in Pennsylvania on October 9 in connection with a major data breach targeting the Federal Bureau of Investigation. FBI Director Kash Patel announced the arrest of the suspected ShinyHunters co-conspirator, who faces US federal extortion charges following a cyber intrusion that exposed sensitive personal records and job application data for thousands of current and former bureau personnel. The extortion group claimed responsibility for the incident through a dark web post on September 23, asserting the attack was personal rather than financially motivated.
Why it matters
The investigation centers on a cyber intrusion into an unpatched third-party system used by the bureau's jobs portal. Internal agency memos previously instructed staff to assume their personal information was compromised. Authorities continue multi-jurisdiction efforts to disrupt the remaining members of the extortion group.
What is confirmed
- FBI Director Kash Patel announced on October 9 in a post on X that agents arrested a suspected co-conspirator of the ShinyHunters hacking group.
- The suspect is a Canadian cybersecurity executive and ransomware expert who faces US federal extortion charges.
- The hack exposed personal information and sensitive data from thousands of current and former bureau employees and job applicants.
- ShinyHunters claimed the breach in a dark web post on September 23, stating the attack was personal, not financially motivated.
Still unconfirmed
- The arrested suspect was directly involved in the theft of FBI data from the jobs portal.
What to watch next
- Public announcement of formal charges against the detained Canadian cybersecurity executive.
- Further disclosures from the FBI regarding the full extent of the personal information exposed during the jobs portal breach.
confidence 95%Sources used for this update (10)
- abcnews.com — Suspect arrested in FBI hack that exposed employee information
- thehackernews.com — FBI Arrests Another ShinyHunters Suspect Reportedly Involved in Its Jobs Portal Hack
- www.foxnews.com — Kash Patel announces arrest of suspected ShinyHunters co-conspirator after FBI jobs portal breach
- www.wcvb.com — FBI arrests cybersecurity executive and ransomware expert in major hack on agents' data - WCVB
- edition.cnn.com — FBI arrests cybersecurity executive in major hack on agents’ data | CNN Politics
- therecord.media — FBI touts another ShinyHunters arrest in response to data breach | The Record from Recorded Future News
- dailysecurityreview.com — ShinyHunters Claims FBI Employee Data Breach in Dark Web Post
- www.yahoo.com — FBI arrests cybersecurity executive in major hack on ... - Yahoo
- mbiz.heraldcorp.com — Hackers raise supermarket refrigerators to 50 C in cyberattack hitting hundreds of French stores - The He....
- circleid.com — Canadian Cybersecurity Executive Arrested Amid FBI Investigation Into ShinyHunters
-
Suspected ShinyHunters Member Arrested in Jordan
Authorities detained a suspected member of the ShinyHunters hacking group in Jordan as the manhunt continues following a major cyber intrusion against the Federal Bureau of Investigation. US officials state that the detained individual is cooperating with bureau investigators as part of ongoing multi-jurisdiction efforts. The development follows an alleged breach involving sensitive personal records and job application data for thousands of current and former bureau personnel. Internal agency memos previously instructed staff to assume their personal information was exposed during the incident, although the full extent of the compromise remains unverified publicly.
Why it matters
The investigation centers on a high-profile cyber incident impacting personnel involved in sensitive national security functions, including counterespionage units and foreign intelligence operations targeting China, Russia, and drug cartels. The alleged data exposure includes home addresses, Social Security numbers, and detailed staff assignments. International law enforcement cooperation remains critical as investigators track down members of the group.
What is confirmed
- A suspected member of the hackers group ShinyHunters has been arrested in Jordan in recent days.
- The detained individual, identified by US officials and another source as Saif al-Din Khader and alias Rey, is cooperating with FBI investigators.
- Several arrests are now said to have been made in connection to the case.
What to watch next
- Additional arrests or official announcements from international law enforcement agencies regarding the ShinyHunters group.
- Public verification from the Federal Bureau of Investigation regarding the full extent of the personnel data intrusion.
confidence 90%Sources used for this update (7)
- www.blackfog.com — The State of Ransomware: September 2026 - BlackFog
- www.techcentral.ie — Manhunt continues for ShinyHunters as new arrest made in Jordan - TechCentral.ie
- www.ultimatecoupons.com — PhotoStamps Promotional Codes & Coupons
- couponfollow.com — Stamps.com Promo Codes | $100 Offer Value Oct Coupons
- thecouponscoop.com — PhotoStamps.com Coupon Codes and Promo Codes - The Coupon Scoop
- www.couponbind.com — Photostamps.Com Promo Codes - Save 50% Off May 2025
- www.retailcoupons.com — Stamps.com Coupons & Promo Codes - RetailCoupons.com
-
FBI Assessing Claims of Major Data Breach
The Federal Bureau of Investigation evaluates fallout after the cybercriminal group ShinyHunters allegedly stole sensitive personal records and job application data for thousands of current and former personnel. The potential compromise includes Social Security numbers, home addresses, and detailed assignments of staff tracking foreign intelligence operations in China and Russia, drug cartels, and high-stakes counterespionage units. While the bureau has not publicly verified the full extent of the intrusion, internal memos instruct agents to assume their personal information is exposed.
Why it matters
Data breaches affecting federal law enforcement agencies pose severe national security risks by potentially exposing personnel involved in sensitive investigations. Internal bureau directives demonstrate that leadership treats the threat seriously despite the absence of a public confirmation. Previous reporting established the scope of the alleged theft by ShinyHunters.
What is confirmed
- The cybercriminal group ShinyHunters claimed to steal sensitive personal records and job application data for thousands of current and former FBI personnel.
- Internal memos directed FBI agents to assume their personal information was exposed.
Still unconfirmed
- The breach compromised Social Security numbers, home addresses, and detailed assignments of staff tracking foreign intelligence operations in China and Russia, drug cartels, and high-stakes counterespionage units.
What to watch next
- Public confirmation or denial from the FBI regarding the extent of the data breach.
- Further communications from ShinyHunters or the release of leaked bureau records.
confidence 100%Sources used for this update (5)
- www.messenger.com — Messenger
- www.meta.com — Messenger from Meta
- apps.apple.com — Messenger App - App Store
- web.messenger.com — Messenger
- play.google.com — Messenger - Apps on Google Play
-
FBI Investigates Massive Data Breach Claimed by ShinyHunters
The FBI is assessing the fallout after the cybercriminal group ShinyHunters claimed to steal sensitive personal records and job application data for thousands of current and former bureau personnel. The breach allegedly compromised Social Security numbers, home addresses, and detailed assignments of staff tracking foreign intelligence operations in China and Russia, drug cartels, and high-stakes counterespionage units. While the bureau has not publicly confirmed the full extent of the intrusion, internal memos directed agents to assume their personal information was exposed.
Why it matters
The incident represents a major national security threat because the stolen files include personnel data on new hires and individuals in sensitive roles. Security experts report that ShinyHunters targeted the bureau in retaliation after the agency dismissed the group's threats and issued advisories telling victims not to pay ransom demands. The breach has also sparked internal criticism regarding the agency's handling of the security incident.
What is confirmed
- The FBI is investigating claims that the ShinyHunters group breached FBIJobs.gov and stole data on thousands of current and former personnel.
- FBI Director Kash Patel stated that Dutch police arrested an alleged leader of the ShinyHunters hacking group.
- Internal bureau communications informed staff that personal information and Social Security numbers were exposed in the incident.
Still unconfirmed
- The hacking group claims the breach was a retaliatory measure against a May 2026 bureau advisory detailing the group's tactics.
What to watch next
- Official findings from the ongoing FBI investigation into the compromised data.
- Further legal proceedings regarding the arrested suspect in the Netherlands.
confidence 95%Sources used for this update (18)
- www.deseret.com — Hackers claim to have stolen data on thousands of FBI agents – Deseret News
- www.lawfaremedia.org — The FBI Data Breach Is a Counterintelligence Disaster | Lawfare
- edition.cnn.com — FBI grapples with fallout from massive data breach | CNN Politics
- www.smh.com.au — FBI hacked: Cybercriminal outfit ShinyHunters say they have sensitive information about secret operatives
- www.upday.com — Hackers steal 5,000 FBI records exposing staff tracking foreign spies and cartels | The latest National a....
- www.claimsjournal.com — FBI Investigating Hackers’ Claims of Stealing Employee Data
- gulfnews.com — FBI data breach puts agents and families at risk - Gulf News
- www.foxnews.com — ShinyHunters claims FBIJobs.gov breach exposed SSNs and home addresses
- www.dexerto.com — FBI says ShinyHunters leader arrested as Pokemon-themed hacking group faces probe - Dexerto
- www.sierrainteractive.com — 15 Real Estate Ad Examples That Convert Leads (2026)
- matterport.com — 9 Real Estate Advertising Tactics That Boost Engagement |...
- choozle.com — Programmatic Advertising | Digital Advertising | Choozle
-
ShinyHunters Claims Breach of FBI Personnel Data via Job Site
The FBI is investigating a potential cyber breach of its job application website after the ShinyHunters hacking group claimed to steal thousands of records. The group asserts it has data on all bureau employees, including sensitive personnel files. Exposed records reportedly reveal analysts working on Russia, China, and electronic surveillance. Additionally, the breach may have compromised the identities of members within the Remote Operations Unit, the agency's secretive hacking arm. The attack appears to be a retaliatory measure against the bureau.
Why it matters
The compromise of personnel data poses a risk to undercover operations and national security. Targeting the Remote Operations Unit specifically exposes the identities of agents tasked with offensive cyber activities. This incident highlights vulnerabilities in government recruitment infrastructure.
What is confirmed
- The FBI is investigating a possible cyber breach of its job application website.
- The hacking group ShinyHunters claimed responsibility for the breach.
- The group claims to have stolen thousands of records on FBI employees and applicants.
Still unconfirmed
- The breach was an act of retaliation against the FBI.
What to watch next
- Evidence of data being leaked or sold on the dark web.
confidence 80%Sources used for this update (11)
- Politico — Cybercriminal group claims to steal thousands of FBI employee records
- 404 Media — ‘We Hacked the FBI:’ Hackers Say They Have Data on All FBI Employees
- Yahoo — FBI investigating possible cyber breach of its job application website: Sources
- Reuters — ShinyHunters hackers say they breached FBI, stole data on bureau employees
- Axios — FBI investigating claims that a major cybercrime group stole sensitive personnel data
- Yahoo — FBI Investigates Claimed Hack of Jobs Site Affecting Agents' Personal Data
- thedebrief.org — Hackers Claim Major FBI Data Breach in Apparent Retaliation Against the Bureau
- www.upi.com — Hackers say they stole thousands of FBI employee records
- www.nextgov.com — Stolen FBI data reveals employees’ roles in intelligence and surveillance
- www.yahoo.com — Hackers Claim FBI Breach Exposed the Agency’s Own Hacking Unit
- san.com — FBI’s secretive hacking unit exposed after breach by cybercrime group
Community Sentiment: How do you assess this situation?
Voice your perspective · Real-time aggregated sentiment from the Live Feeds community