Hacking group ShinyHunters claims it breached the FBI, stole agents’ and applicants’ data
ThinkingNews Desk · how this was written
The FBI is investigating claims that the hacking group ShinyHunters breached its systems. The group alleges it stole sensitive data belonging to agency employees and job applicants. Authorities are currently working to verify the authenticity of these claims and the extent of the potential information theft.
Written from all 5 reports below, not from any single one.
How it was reported
- TechCrunch·Hacking group ShinyHunters claims it breached the FBI, stole agents’ and applicants’ data
- TechMeme·ShinyHunters claims it used an Oracle PeopleSoft zero-day to hack FBI-related services and steal employee and applicant data; it also defaced the FBI jobs site (Joseph Cox/404 Media)
- The Next Web·FBI investigating claims that ShinyHunters stole data on its agents
- TechMeme·A sample of FBI data allegedly stolen by ShinyHunters includes granular detail on officials' job assignments on China, Russia, cartels, cyber, and other issues (Reuters)
- Engadget·ShinyHunters hackers claim to have 2-3TB of sensitive information about FBI employees
The hacking group ShinyHunters claims to have stolen 2-3TB of sensitive data from the FBI by exploiting a zero-day vulnerability in Oracle’s PeopleSoft software. The breach includes personal information for 5,000 employees and details regarding intelligence operations against China and Russia, intended to coerce the agency into retracting previous statements about the group.
- Ars Technica·FBI rushes to investigate if ShinyHunters hack of thousands of employees is real
The FBI is investigating a claim that the hacker group ShinyHunters stole about two to three terabytes of personal data from the agency’s jobs website, FBIJobs.gov, after exploiting an unknown bug. The compromised data includes names, addresses, phone numbers, spouses, medical information, and sensitive professional details such as counter-intelligence work on China, Russia, Iran, and street gangs. None of the data has been released publicly.
Related stories
- Here's what actually happened in OpenAI's Australian gov't server hack3 outlets
- Researchers: OpenAI agents attacked Ruby package manager RubyGems in May; OpenAI says its agents used RubyGems to access the internet to do "benign tasks" (Robert McMillan/Wall Street Journal)4 outlets
- Kash Patel's personal email account was accessed by hackers linked to Iran6 outlets
- Sources: OpenAI found ~24 incidents of its agents acting in undesirable ways as of mid-September; OpenAI says its agents leaked 53 images from ChatGPT users (Reuters)4 outlets