The FBI warns employees of potential data compromise after ShinyHunters claims to have stolen sensitive information from its jobs website.
FBI Issues Warning After Data Breach
The FBI has alerted its employees that their personal information may have been compromised following a significant breach of its jobs website, FBIjobs.gov. An internal memo indicates that all staff should consider their data at risk.
The hacker group ShinyHunters claims responsibility for the breach, asserting that they have stolen between 2 to 3 terabytes of sensitive data. This includes information about FBI agents, job applicants, and even details about their spouses, such as names, phone numbers, and home addresses.
The breach reportedly began on September 22, when visitors to the website noticed a takeover banner. ShinyHunters claims to have exploited a zero-day vulnerability in Oracle's PeopleSoft software, although the FBI has not yet confirmed the specifics of the breach.
In a video message released on September 29, Brett Leatherman, chief of the FBI Cyber Division, addressed the hackers, referencing a recent arrest in the Netherlands and stating, "we know how to find you." He suggested that the hackers could reach out to the FBI, to which ShinyHunters responded that the arrested individual had no connection to their group.
The FBI suggests cooperation with ShinyHunters: "You know how to find us, and we know how to find you. I suggest you reach out first while the choice is still yours." — Ken Klippenstein (@kenklippenstein) September 29, 2026
ShinyHunters has denied that the breach was a direct reaction to a warning issued by the FBI in May, which described the group's harassment tactics. They also stated that the ultimatum they provided was a marketing tactic and that they have no intention of releasing the stolen data.
The FBI's memo advises employees to prepare for virtual briefings and to be on guard for suspicious communications from unknown sources. The risk associated with the exposure of home addresses is particularly concerning, as it raises potential threats of doxxing and identity theft.
This incident mirrors previous security breaches in the cryptocurrency sector, where personal data leaks have resulted in extortion attempts and other criminal activities. The hackers' deadline has passed, but the FBI continues to treat the situation seriously, urging staff to remain vigilant regarding their personal information.
