Hacking group ShinyHunters claims it breached the FBI, stole agents’ and applicants’ data
The hacking group ShinyHunters asserts it accessed personnel data across the entire FBI workforce using Oracle PeopleSoft. Federal investigators continue to examine the claimed intrusion, while Dutch police previously arrested a suspect connected to the collective. Authorities also suspect a United States consulting firm executive helped operate an extortion pressure website for the cybercriminals. Although the FBI acknowledges an ongoing investigation into unauthorized activity, federal officials have not verified the specific volume of compromised data or confirmed the breach itself.
Listen to Live Briefing
Real-time synthesized voice briefing · Live Feeds Desk
- ✓ ShinyHunters claims it breached FBI personnel data via Oracle PeopleSoft.
- ✓ The FBI has not confirmed any compromise of its data.
What changed
Gadget Review reported that the ShinyHunters group accessed FBI personnel data specifically through Oracle PeopleSoft.
Live updates
-
ShinyHunters Claims FBI Data Breach Via Oracle PeopleSoft
The hacking group ShinyHunters asserts it accessed personnel data across the entire FBI workforce using Oracle PeopleSoft. Federal investigators continue to examine the claimed intrusion, while Dutch police previously arrested a suspect connected to the collective. Authorities also suspect a United States consulting firm executive helped operate an extortion pressure website for the cybercriminals. Although the FBI acknowledges an ongoing investigation into unauthorized activity, federal officials have not verified the specific volume of compromised data or confirmed the breach itself.
Why it matters
This incident highlights ongoing cyber vulnerabilities within federal law enforcement infrastructure. Investigators previously tied executives at two ransomware negotiation firms to the extortion ring. The involvement of consulting executives points to complex insider support networks for modern cybercrime syndicates.
What is confirmed
- ShinyHunters claims it breached FBI personnel data via Oracle PeopleSoft.
- The FBI has not confirmed any compromise of its data.
Still unconfirmed
- ShinyHunters claims it has data on the entire FBI workforce.
- ShinyHunters accessed data regarding 5,000 employees and job applicants from FBIJobs.gov.
What to watch next
- Official verification from the FBI regarding the Oracle PeopleSoft system compromise.
- Further updates on the Dutch police suspect and the United States consulting firm executive.
confidence 90%Sources used for this update (2)
- www.rawstory.com — Raw Story
- www.gadgetreview.com — “We Hacked the FBI”: Group Claims It Has Data on the Entire ...
-
Suspect Arrested in Netherlands as FBI Probes ShinyHunters Breach
Dutch police arrested a suspect linked to the ShinyHunters hacking group while federal investigators examine a claimed breach of FBI-related systems. Federal authorities suspect a United States consulting firm executive helped the extortionists operate a pressure website used against victims. ShinyHunters asserts it accessed data regarding 5,000 employees and job applicants from FBIJobs.gov. The FBI acknowledges an ongoing investigation into unauthorized activity but has not verified the specific volume of compromised data claimed by the hackers. Investigators previously tied executives at two ransomware negotiation firms to the extortion ring.
Why it matters
The involvement of cybersecurity and negotiation executives in ransomware operations highlights insider threats facing corporate and government incident response. The intersection of international law enforcement actions, such as the Dutch arrest, with ongoing federal probes underscores the cross-border nature of modern cyber extortion syndicates.
What is confirmed
- Dutch police arrested a suspect linked to the ShinyHunters hacking group.
- Federal investigators suspect an executive at a United States consulting firm helped ShinyHunters operate a pressure website for ransom demands.
- The FBI is investigating an alleged breach affecting employee data on FBIJobs.gov.
Still unconfirmed
- ShinyHunters breached FBI-related systems and stole data concerning 5,000 employees and job applicants.
What to watch next
- Official statements from the FBI regarding the validity of the FBIJobs.gov data breach claims.
- Further details from Dutch authorities regarding the identity and extradition status of the arrested suspect.
- Developments in the investigation concerning executives at ransomware negotiation firms.
confidence 90%Sources used for this update (3)
- cybersecuritynews.com — FBI Suspects Cybersecurity Executive Helped ShinyHunters Run ...
- techjournal.org — ShinyHunters FBI Breach Claim Takes New Turn After Arrest
- www.breitbart.com — Israel / Middle East - Latest News
-
Feds Suspect Ransom Negotiator Ran ShinyHunters Extortion Site
Federal investigators probing the ShinyHunters hacking group have identified executives at two ransomware negotiation firms with unusually close ties to the extortionists. Sources close to the investigation state that a United States executive helped operate a website used to pressure victims into paying ransoms. ShinyHunters claims it breached FBI-related systems and compromised data concerning 5,000 employees and job applicants. The FBI confirms an ongoing investigation into unauthorized activity but has not verified the broader claims made by the hackers regarding the stolen data volume.
Why it matters
The ShinyHunters syndicate has claimed credit for dozens of major data breaches since originating in 2019 under cybercriminals based in France. Control of the brand shifted to a teenage hacker from Amman, Jordan, known as Rey following the arrest of original members. The group has reportedly extorted more than $70 million from victims this year alone.
What is confirmed
- U.S. federal investigators identified executives at two different ransomware negotiation firms who maintained unusually close relations with the ShinyHunters extortion group.
- ShinyHunters has claimed responsibility for breaching FBI systems and stealing data on 5,000 employees.
- The FBI confirmed an investigation into alleged unauthorized activity but has not verified the hackers' broader claims.
- ShinyHunters has extorted more than $70 million from victims this year according to the FBI.
Still unconfirmed
- A United States executive helped ShinyHunters operate a website that pressured victims into paying a ransom.
- Control over the ShinyHunters brand passed to a teenage hacker from Amman, Jordan, known as Rey.
What to watch next
- Any official federal charges against the ransom negotiation executives suspected of aiding the extortion site.
- Verification by the FBI regarding the full extent of the data allegedly stolen from FBIjobs.gov.
confidence 90%Sources used for this update (3)
- krebsonsecurity.com — Feds Suspect Ransom Negotiator Ran ShinyHunters Extortion ...
- shattered.io — ShinyHunters FBI Breach Claim: What We Know [2026]
- www.wionews.com — FBI hacked? Hacking group ShinyHunters claims to 'have ... - WION
-
FBI Arrests Suspects in ShinyHunters Data Breach
Law enforcement agencies have arrested multiple suspects following a cyberattack by the ShinyHunters group that compromised the FBI jobs portal and exposed personnel data. FBI Director Kash Patel announced the arrest of a Canadian citizen in Pennsylvania on suspicion of direct involvement in the breach. Additional arrests include a 24-year-old man detained by Dutch police on September 29, and another suspect reportedly detained in Jordan who is cooperating with the FBI. An internal FBI review determined that a contractor security failure caused the portal intrusion, prompting warnings to staff regarding exposed personal details.
Why it matters
The cyberattack targeted FBI systems connected to the bureau jobs website, prompting an investigation into potential compromises of sensitive personal information for thousands of employees and applicants. The breach exposed vulnerabilities in contractor security management. Authorities responded with international arrests targeting individuals linked to the group.
What is confirmed
- FBI Director Kash Patel announced the arrest of a Canadian citizen in Pennsylvania on suspicion of direct involvement in the breach.
- Dutch police detained a 24-year-old man on September 29 in connection with the ShinyHunters cyberattack.
- An internal FBI review determined that a contractor security failure caused the portal intrusion.
- Federal agents arrested Edward Dubrovsky, a 54-year-old Canadian cybersecurity executive, in Pennsylvania.
Still unconfirmed
- Another suspect was reportedly detained in Jordan and is cooperating with the FBI.
What to watch next
- Further official announcements regarding the scope of the stolen data and compromised personnel records.
- Additional court proceedings and extradition details for arrested suspects.
confidence 90%Sources used for this update (17)
- thehackernews.com — The Hacker News | #1 Trusted Source for Cybersecurity News
- github.com — nocache/README at master · Feh/nocache · GitHub
- classic.yarnpkg.com — nocache - Yarn
- developer.mozilla.org — Cache-Control header - HTTP | MDN - MDN Web Docs
- no-cache.net — Cache directive "no-cache" | An explaination of the HTTP...
- github.com — GitHub - helmetjs/nocache: Middleware to disable client-side...
- learn.microsoft.com — CacheControlHeaderValue.NoCache Property (System.Net.Http.Headers...
- ticklethewire.com — FBI Investigates Possible Breach After Hackers Claim They Stole Agent Data
- dailysecurityreview.com — ShinyHunters Claims FBI Employee Data Breach in Dark Web Post
- www.cbsnews.com — FBI arrests suspected member of ShinyHunters in connection ...
- mbiz.heraldcorp.com — Hackers raise supermarket refrigerators to 50 C in cyberattack hitting hundreds of French stores - The He....
- cybersecuritynews.com — FBI Arrests Another Suspected ShinyHunters Hacker Linked to ...
-
FBI Arrests Suspects in ShinyHunters Breach
Law enforcement agencies have apprehended multiple suspects following a cyberattack by the ShinyHunters group that compromised the FBI jobs portal and exposed personnel data. FBI Director Kash Patel announced the arrest of a Canadian citizen in Pennsylvania on suspicion of direct involvement in the breach. Additional arrests include a 24-year-old man detained by Dutch police on September 29, and another suspect reportedly detained in Jordan who is cooperating with the FBI. An internal FBI review determined that a contractor security failure caused the portal intrusion, prompting warnings to staff regarding exposed personal details.
Why it matters
The international cyber extortion group ShinyHunters has targeted numerous organizations since 2020. The recent breach of the FBI jobs portal exposed sensitive records and drew scrutiny over internal cybersecurity protocols. Authorities in multiple jurisdictions have moved swiftly to apprehend suspects and recover compromised data streams.
What is confirmed
- The FBI arrested a Canadian citizen in Pennsylvania on suspicion of involvement in the jobs portal hack, as announced by FBI Director Kash Patel.
- Dutch police announced the arrest of a 24-year-old man connected to the ShinyHunters hacking group on September 29.
- An internal FBI review determined that a security failure by a contractor managing the jobs site caused the breach.
- The FBI warned its staff that ShinyHunters may hold their private details following the compromise of the bureau's jobs portal.
Still unconfirmed
- ShinyHunters claimed it obtained data on every FBI employee, including sensitive medical and psychiatric evaluation records.
- A suspected ShinyHunters member detained in Jordan is reportedly helping the FBI identify other hackers linked to the group.
What to watch next
- Formal public charges and court filings against the arrested suspects
- Further details from the FBI regarding the scope of the contractor security failure
- Additional international arrests related to the ShinyHunters hacking group
confidence 95%Sources used for this update (22)
- weeklyblitz.net — ShinyHunters arrest: When cybercrime stops being just about data - BLiTZ
- www.ms.now — Officials cite ‘incompetence’ for massive FBI cyber hacking attack - MS NOW
- www.bleepingcomputer.com — ShinyHunters hacker reportedly detained in Jordan, aiding FBI - BleepingComputer
- www.nbcnews.com — FBI says contractor failure led to hack of its jobs website
- cybersecuritynews.com — ShinyHunters Member Detained in Jordan, Reportedly Helping FBI Identify Fellow Hackers - Hacking News ,Cy....
- www.breitbart.com — Feds Arrest Multiple Suspects in 'ShinyHunters' Hack that Targeted FBI
- decrypt.co — FBI Tells Its Employees to Assume Hackers Have Their Personal Data - Decrypt
- www.oann.com — Dutch police arrest ‘suspected leader’ of hacker group ShinyHunters following FBI site breach – One....
- slate.com — FBI Director Kash Patel is the Trump administration’s most dangerous man. - Slate Magazine
- www.yahoo.com — ShinyHunters hacker detained in Jordan, cooperating with FBI ...
- breached.company — ShinyHunters: attacks, victims and timeline | Breached.Company
- www.pcmag.com — ShinyHunters Breached FBI After Contractor Failed to Install ...
-
Suspected Hacker Arrested Following Massive FBI Data Breach
Federal law enforcement is assessing the fallout from a major cybersecurity incident after the hacking group ShinyHunters claimed responsibility for stealing sensitive personnel records. While the bureau has not publicly confirmed the intrusion, it previously warned agents that their Social Security numbers and personal data were exposed. Reuters reviewed documents indicating the stolen cache contains medical and psychiatric evaluation records for thousands of current and former employees. Authorities have now apprehended a suspect in connection with the breach.
Why it matters
The incident highlights vulnerabilities within high-profile federal networks, exposing sensitive background details of personnel who handle critical national security investigations. Internal criticism has mounted regarding how the bureau handled the fallout after hackers asserted they obtained a database holding records for 60,000 individuals.
What is confirmed
- A cybercriminal group claimed to steal sensitive personal data on thousands of current and former FBI employees.
- A 24-year-old man from Amsterdam was arrested after the FBI data breach.
Still unconfirmed
- The 24-year-old man from Amsterdam is also accused of trying to arrange two murders.
What to watch next
- Official public confirmation of the breach details by the FBI
- Extradition proceedings and formal charges against the arrested suspect in Amsterdam
confidence 90%Sources used for this update (2)
- www.cnn.com — FBI grapples with fallout from massive data breach - CNN
- uk.news.yahoo.com — Suspected ShinyHunters hacker arrested after FBI data breach - Yahoo News UK
-
FBI Personnel Data Exposed in ShinyHunters Breach
The FBI has declared a cybersecurity incident after the hacking group ShinyHunters allegedly breached its systems and stole personnel data. While the bureau has not publicly confirmed a breach, it informed agents that their personal information and Social Security numbers were exposed. Reuters reviewed documents showing the stolen cache includes psychiatric and medical evaluation records. ShinyHunters claims the compromised database holds records for 60,000 current and former personnel.
Why it matters
The cybercrime collective ShinyHunters asserted on Tuesday, September 22, that it successfully breached the bureau. Experts warn that the compromise of sensitive medical and personal data leaves federal personnel vulnerable to targeted attacks, scams, and blackmail. Dutch police previously arrested a 24-year-old suspect linked to the hacking group prior to the incident.
What is confirmed
- The FBI declared a cybersecurity incident after hackers stole personal data.
- The bureau told its agents that their personal information and Social Security numbers were exposed.
- The hacking group ShinyHunters first claimed it breached the FBI on Tuesday, September 22.
Still unconfirmed
- ShinyHunters obtained granular details including psychiatric evaluations, prescriptions, and blood and urine test results.
- The compromised database contains records belonging to 60,000 current and former personnel.
What to watch next
- Public confirmation or denial of the breach scope by FBI leadership
- Further verification of the leaked medical and psychiatric records reviewed by Reuters
confidence 90%Sources used for this update (4)
- techcrunch.com — FBI reportedly declares ‘cyber security incident’ after ...
- www.asiaone.com — ShinyHunters hackers say they stole psychiatric and medical records of FBI staff, World News - AsiaOne
- www.fairn.co.kr — [김관호 안보브리핑] 폭주하는 AI, 인류를 끝장낼 것인가? 당신생각은 ?
- redstate.com — FBI Hack Gets Worse: ShinyHunters Claims Medical Records of 60,000 Current and Former Personnel – RedSt....
-
FBI Investigates ShinyHunters Breach Claim
The FBI is investigating claims by the cybercrime group ShinyHunters that it breached the bureau's jobs website and stole sensitive personnel data belonging to thousands of agents and applicants. The group asserts it obtained Social Security numbers, home addresses, and confidential medical records, including psychiatric evaluations, prescriptions, and blood and urine test results. Experts warn that the alleged compromise leaves federal personnel vulnerable to targeted attacks, scams, and blackmail. Dutch police also arrested a 24-year-old suspect linked to the group before the incident occurred.
Why it matters
The cybersecurity incident centers on the compromise of FBIJobs.gov, forcing the agency to take its recruitment portal offline. ShinyHunters stated it executed the hack because the bureau dismissed its threats as exaggerated. Investigators are still working to verify whether the stolen data trove is genuine and what specific information was compromised.
What is confirmed
- The FBI stated on September 23 that it was investigating a criminal hacking group's claims of stealing sensitive data belonging to thousands of agents and applicants and compromising the bureau's jobs website.
- ShinyHunters claimed it breached FBIJobs.gov and stole Social Security numbers and sensitive personnel data.
- Dutch police arrested a 24-year-old suspected member of the ShinyHunters hacking group before the alleged cyberattack took place.
Still unconfirmed
- ShinyHunters claimed it hacked the FBI after the agency called its threats exaggerated.
- ShinyHunters stated it stole medical information, psychiatric records, clinical visits, prescriptions, discharges, and blood and urine test results of special agents.
- Experts say the hack could leave agents vulnerable to scams, blackmail, and targeted attacks.
What to watch next
- Results of the ongoing FBI investigation into what data was actually taken
- Official verification of the scope of the FBIJobs.gov breach
- Further legal proceedings regarding the arrested suspect in the Netherlands
confidence 90%Sources used for this update (7)
- www.deseret.com — Hackers claim to have stolen data on thousands of FBI agents – Deseret News
- www.thestar.com.my — FBI investigates hackers' claim to have stolen sensitive employee data, compromised jobs website
- www.foxnews.com — ShinyHunters claims FBIJobs.gov breach exposed SSNs and home addresses
- www.bbc.com — Special agents blood and urine test results stolen in FBI hack
- www.jpost.com — ShinyHunters hackers say they stole psychiatric and medical records of FBI staff | The Jerusalem Post
- www.bbc.com — ShinyHunters: Dutch police arrest suspected member of group that claimed FBI hack
- www.nydailynews.com — Dutch police arrest suspected member of ShinyHunters, hacking group that claimed to breach FBI jobs site
-
ShinyHunters Claims FBI Hack Stole Personnel and Applicant Data
The cybercrime group ShinyHunters claims it breached the FBI on Monday and stole sensitive personnel data, including home addresses, phone numbers, spouse details, and sensitive assignments concerning thousands of federal employees and applicants. The FBI is investigating the alleged cyberattack and took its primary recruitment portal offline. Despite claiming to possess information on all FBI employees, ShinyHunters stated on Monday that it never intended to and would never publish the massive data trove. The hackers have released only a sample of the alleged data thus far, leaving their broader claims partly verified.
Why it matters
The incident threatens the personal security of federal law enforcement personnel by exposing home addresses and operational assignments to malicious actors. The FBI responded swiftly to the initial intrusion claims by shutting down its primary recruitment portal while internal security teams assess the extent of the compromise. Questions persist regarding the true scale of the breach and whether the hackers accessed active counterintelligence databases alongside routine personnel files.
What is confirmed
- The cybercrime group ShinyHunters claims it breached the FBI on Monday and stole data about personnel and FBI applicants.
- ShinyHunters told 404 Media on Monday that it had decided from the very beginning never to publish the massive trove of FBI employee data.
Still unconfirmed
- The hackers stole sensitive personnel data on thousands of federal agents and job applicants, including names, addresses, phone numbers, and spouse details.
- The cyberattack may have exposed employees' personal details and sensitive assignments.
What to watch next
- Results of the FBI investigation into the authenticity and scope of the alleged data breach
- Any further release of leaked files or data samples by ShinyHunters
- Official statements from federal authorities regarding the security of the primary recruitment portal
confidence 90%Sources used for this update (3)
- www.ibtimes.co.uk — 'Management Is Lost': Kash Patel's FBI Reels From Massive Hack Exposing Agents' Home Addresses, Sensitive Jobs
- www.404media.co — FBI Hackers Say They Won’t Publish Massive Trove of FBI Employee Data
- www.cbsnews.com — Cybercriminal group claims it stole FBI personnel and ...
-
ShinyHunters claims FBI breach, theft of agents' and applicants' data
The cybercrime group ShinyHunters claims to have breached the FBI's networks, stealing sensitive personnel data on thousands of federal agents and job applicants. The hackers released a sample of alleged data, including names, addresses, phone numbers, and spouse details. The FBI is investigating the claims and took its primary recruitment portal offline in response.
Why it matters
This alleged breach presents a major counterintelligence threat, potentially putting agents and their families at risk of extortion. ShinyHunters is a prolific cybercriminal group known for large-scale data theft and extortion. The group claims the attack is retaliatory and has demanded the removal of a specific warning.
What is confirmed
- ShinyHunters claims to have breached the FBI and stolen data linked to current and former bureau employees and job applicants.
- The hackers claim to have accessed information on almost all FBI agents.
- The alleged breach includes sensitive data such as home addresses, phone numbers, and spouse details.
- The FBI is investigating the claims and took its primary recruitment portal, FBIJobs.gov, offline in response.
- ShinyHunters claims to have accessed terabytes of information through an Oracle PeopleSoft server and an Amazon-hosted government cloud.
Still unconfirmed
- ShinyHunters claims the attack is a retaliatory measure and has demanded the removal of a specific warning.
What to watch next
- Independent verification of the breach and the extent of the stolen data
- FBI's official statement on the investigation's progress
- ShinyHunters' next move or potential demands
confidence 85%Sources used for this update (9)
- www.freepressjournal.in — ShinyHunters Claims FBI Hack, Says It Stole Data On 'Almost All FBI Agents'
- flipboard.com — Hacking group ShinyHunters claims it breached the FBI, stole agents’ and applicants’ data
- www.egerin.com — Hacking group ShinyHunters claims it breached the FBI, stole agents’ and applicants’ data | TechCrunc....
- cashwalklabs.io — Hacking group ShinyHunters claims it breached the FBI, stole agents' and applicants' data | Global Cashwa....
- www.livemint.com — FBI hacked? ShinyHunters claims brazen theft of sensitive agent data — what the cybercriminal group wan....
- economictimes.indiatimes.com — ShinyHunters claims hacking FBI data: All you need to know about the cybercriminal group and its other vi....
- techcrunch.com — Hacking group ShinyHunters claims it breached the FBI, stole agents' and applicants' data
- www.breitbart.com — Hacking Group 'ShinyHunters' Claims Massive FBI Breach, Theft of Agents' Personal Data
- www.404media.co — ‘We Hacked the FBI:’ Hackers Say They Have Data on All FBI Employees - 404 Media
-
FBI investigates data theft claims by ShinyHunters hacking group
The FBI is investigating an alleged breach of its networks after the cybercrime group ShinyHunters claimed to have stolen sensitive personnel data. The hackers assert they accessed information on thousands of federal agents and job applicants, including home addresses, phone numbers, and spouse details. In response to the claims, the bureau took its primary recruitment portal, FBIJobs.gov, offline. The group suggests the attack is a retaliatory measure and has demanded the removal of a specific warning. Independent verification of the breach and the extent of the stolen data is currently unavailable.
Why it matters
ShinyHunters is a known major cybercrime group. A breach of federal law enforcement personnel data poses significant security risks to agents and their families. The focus on the recruitment portal suggests a vulnerability in the bureau's external-facing infrastructure.
What is confirmed
- The FBI is investigating claims that the hacking group ShinyHunters stole sensitive personnel data.
- ShinyHunters claims it stole records belonging to FBI agents and job applicants.
- The bureau's main recruitment portal, FBIJobs.gov, was taken offline.
Still unconfirmed
- The hackers claim to possess every agent's name, role, badge number, home address, phone number, and spouse information.
- The breach was carried out as retaliation against the bureau.
- ShinyHunters demanded the removal of a warning in exchange for the data.
What to watch next
- Independent verification of the stolen data files
- Official FBI confirmation regarding the specific nature of the breach
- The restoration of the FBIJobs.gov portal
confidence 80%Sources used for this update (9)
- 404 Media — ‘We Hacked the FBI:’ Hackers Say They Have Data on All FBI Employees
- Reuters — ShinyHunters hackers say they breached FBI, stole data on bureau employees
- Axios — FBI investigating claims that a major cybercrime group stole sensitive personnel data
- CNN — FBI investigating apparent breach after hackers claim to have stolen thousands of federal agents’ data
- TechCrunch — Hacking group ShinyHunters claims it breached the FBI, stole agents’ and applicants’ data
- thedebrief.org — Hackers Claim Major FBI Data Breach in Apparent Retaliation Against the Bureau
- www.upi.com — Hackers say they stole thousands of FBI employee records
- sg.news.yahoo.com — FBI investigates apparent theft of its personnel data by hackers
- www.theyeshivaworld.com — FBI BREACH CLAIM: ShinyHunters Says It Stole Agent and Applicant Data, Demands Warning Be Removed
Community Sentiment: How do you assess this situation?
Voice your perspective · Real-time aggregated sentiment from the Live Feeds community