ShinyHunters hackers say they breached FBI, stole data on bureau employees

Read the original at The Straits Times ↗
The Straits Times · collected 2026-09-23 · by The Straits Times

Quick Summary

On September 22, the hacking group ShinyHunters claimed to have breached FBIjobs.gov, stealing data on nearly all current and former FBI employees. They provided what they said was information on roughly 5,000 agents as a sample, including names, home addresses, Social Security numbers, job assignments, and family member details. Reuters partially verified the authenticity of some of this data but could not confirm its origin or whether it indeed came from an FBI breach. The FBI acknowledged unauthorized activity on their website but did not specify the nature or extent of any potential data theft.
Written locally by qwen2.5:14b on 2026-09-23, using this article's own text rather than the other coverage of the same event (that is the story summary below).

AI analysis runs on qwen2.5:14b, locally

Story summary

ShinyHunters, a notorious hacking group, claimed on September 22 that they breached the FBIjobs.gov website and stole personal data from thousands of current and former FBI employees. The hackers obtained sensitive information such as names, home addresses, phone numbers, email addresses, and dates of birth for many agents and job applicants. ShinyHunters defaced the FBI's jobs portal with a mocking message that included President Trump’s signature phrase "Thank you for your attention to this matter," implying retaliation against his administration.

The FBI acknowledged unauthorized activity affecting their job application site but did not confirm the theft of data. Reuters partially verified some stolen information by cross-referencing it with credit bureau records and previous breaches, finding matches in at least nine cases. The hackers threatened further action if the FBI does not address what they see as false allegations against them.

The breach potentially impacted a significant number of individuals who applied for or held positions within the FBI since 2017 when the site became the primary application platform for agent and support roles. The full extent of data compromised remains unclear, but ShinyHunters shared what they claim is a small sample dataset involving approximately 5,000 individuals.

Written for “FBI Data Breach” on 2026-10-05, grounded in this article and the 22 other(s) covering the same event.

Signals How these are calculated →

Claims extracted
21
claim-shaped sentences
Uncertain
29%
6 of 21 hedged
Leaning
not political
takes no side on a contested political question
Correction & hedging signals
59.1
corrections and hedging in what we collected; not a measure of accuracy
Outlets on this story
23
Crime & Law
Narrative spread
1
articles carrying this framing
Analyzed 2026-09-23 · how these are computed

Story

📰 FBI Data Breach
Crime & Law · 23 article(s) covering the same event. See how they differ ↓

How this is being covered How these are calculated →

Article leaning vs. publisher reliability
Source leaning vs. consistency

Compared with similar articles

This article reads unscored and hedges 29% of its claims. Each row says how that neighbour differs.
NBC News · 0.93 cosine similarity
⚖️ leaning not scored 🔴 36% hedged 9 of 25 📰 publisher trust 95
“Both articles report on ShinyHunters claiming a breach of the FBI's FBIjobs.gov portal, and the FBI's subsequent investigation of this claim.”
The Sydney Morning Herald · 0.90 cosine similarity
⚖️ leaning not scored 🔴 28% hedged 8 of 29 📰 publisher trust 61
“Both articles report on ShinyHunters claiming to have breached the FBI and stolen data on bureau employees, including detailed information about job assignments.”
The Straits Times · 0.89 cosine similarity
⚖️ leaning not scored 🔴 17% hedged 2 of 12 📰 publisher trust 59
“Both articles describe ShinyHunters claiming to have breached the FBI and stolen data on employees, with Article B providing more detailed information about the type of data stolen.”
ABC News (US)
⚖️ leaning not scored 🔴 67% hedged 8 of 12 📰 publisher trust 59
“Both articles describe the same breach of FBIjobs.gov by ShinyHunters and mention stolen data including medical records, indicating they are reporting on the exact same incident.”
BBC News
⚖️ leaning not scored 🔴 24% hedged 10 of 41 📰 publisher trust 78
“Both articles describe the same FBI data breach incident involving ShinyHunters hackers and the concerns of FBI employees.”
The Hindu · 0.97 cosine similarity
⚖️ leaning not scored 🔴 62% hedged 5 of 8 📰 publisher trust 60
“Both articles describe ShinyHunters claiming to have breached the FBI on September 22, 2026, and stealing data on bureau employees.”
ABC News (AU) · 0.92 cosine similarity
⚖️ leaning not scored 🔴 32% hedged 7 of 22 📰 publisher trust 61
“Both articles describe the identical cyber attack by ShinyHunters on the FBI, stating that data was stolen from current and former employees, with similar timing and content.”
The Straits Times · 0.91 cosine similarity
⚖️ leaning not scored 🔴 24% hedged 7 of 29 📰 publisher trust 59
“Both articles discuss ShinyHunters claiming to have breached the FBI on September 22, with the second article providing more details about the type of data stolen.”
CBS News · 0.89 cosine similarity
⚖️ leaning not scored 🔴 33% hedged 10 of 30 📰 publisher trust 66
“Both articles describe ShinyHunters claiming to have breached the FBI on September 22, stealing data related to employees and job applicants.”
The Guardian · 0.88 cosine similarity
⚖️ leaning not scored 🔴 42% hedged 5 of 12 📰 publisher trust 60
“Both articles describe the identical breach of FBIjobs.gov by ShinyHunters on September 22, 2026.”

Publisher

The Straits Times · 1905 article(s) · 3 correction(s) detected
Running correction rate · 3 correction(s)
2026-10-04
Tennessee prison chief resigns after failed execution
2026-10-03
US prison chief resigns after failed execution of death row inmate Christa Pike
2026-09-13
Russia hits Ukrainian-Polish border area, Kyiv says

Who wrote this

The Straits Times
1311 article(s) here · 1 carrying a prediction
🔮 Britain set to levy tariffs on Chinese electric cars: Report AI generated
🔮 “I wouldn’t take a trade of saying, ‘We’ll make sure there’s no major hacks, there’s no misuse of this technology, there’s zero scams, there’s zero all the other bad things that will happen,’“ Altman said.
🔮 Austrian government's No. 2 figure says he will step down VIENNA, Oct 4 -
🔮 Ukrainian President Volodymyr Zelenskiy said on Sunday he believed Russia may have shared jet-drone technology with its longstanding ally North Korea.
🔮 A committee of the Mecca defence pact between Turkey, Saudi Arabia and Pakistan will hold talks in Riyadh on Monday, with Turkish ministers among those attending, the Turkish foreign ministry said on Sunday.
🔮 “The chain of failures that preceded the incident could have led to a disaster of historic proportions, and this is how an Israeli prime minister responds?” Lapid wrote on X. “Just as Netanyahu escaped an investigation into the October 7 massacre, he is now running away again,” he added.
🔮 DUBAI, Oct 4 - Iran's Oil Minister Mohsen Paknejad has resigned and Hamid Bovard, chief executive of the government-owned National Iranian Oil Company, will be in charge of the ministry as acting minister, state media said on Sunday, without providing a reason for the resignation. Mohsen Paknejad has been the oil minister of the OPEC member country since August 2024 and resigns as the seven-month war between Iran and the US puts pressure on the country's economy.
2026-10-04 · assertive framing · Iran's oil minister resigns, no reason given
🔮 "The Green Party has made antisemitism party policy and become a racist party," the Movement for Progressive Judaism said, adding that the support of some Jews for the motion did not mean it would not be used to discriminate against others.
🔮 Germany will not be intimidated into dropping its support for Ukraine, Chancellor Friedrich Merz said on Oct 4 as he announced a further €1 billion (S$1.4 billion) in military aid during a visit to Kyiv marked by Russian drone attacks.
🔮 According to the motion, Zionism would be “treated as any other form of racism” and the party supports the establishment of a “single democratic Palestinian State in all of historic Palestine”.
2026-10-04 · assertive framing · UK Green party adopts ‘Zionism is racism’ policy
Also by The Straits Times
Nothing else under this byline is closely related to this article, so these are simply their most recent.
All 1311 articles by The Straits Times →

Topics

FBI Reuters ShinyHunters Social Security WASHINGTON

Subjects

FBI ORG · 14× ShinyHunters ORG · 7× Reuters ORG · 6× Social Security ORG · 2× District 4 Labs ORG · 1× FBIjobs.gov ORG · 1× Kash Patel PERSON · 1× WASHINGTON GPE · 1× disruption ORG · 1× the Federal Bureau of Investigation ORG · 1×

Narrative

Reuters was able to partially verify the authenticity of the information by running the details, including the Social Security numbers, against credit bureau records and previously breached data preserved by the dark-web intelligence firm District 4 Labs.
framing: mixed · carried by 1 article(s) · first seen 2026-09-23
🔮 In a statement posted to its dark-web site and during an online chat with Reuters, ShinyHunters said it had targeted the FBI in response to a May 2026 agency announcement that detailed ShinyHunters’ methods and advised targets not to pay.
2026-09-23 · The Straits Times
ShinyHunters hackers say they breached FBI, stole data on bureau employees · mixed framing

Claims (21 extracted, 6 hedged)

ShinyHunters hackers say they breached FBI, stole data on bureau employees AI generated asserted
they → say → employees
WASHINGTON – The digital extortion group known as “ShinyHunters” said on Sept 22 that it had breached the Federal Bureau of Investigation (FBI) and stolen data on a huge number of current and former FBI employees. asserted
it → know → employees
Later, the FBI said in a statement that the agency “is aware of claims regarding unauthorised activity affecting FBIjobs.gov and is currently investigating”. uncertain
agency → say → FBIjobs.gov
In a statement posted to its dark-web site and during an online chat with Reuters, ShinyHunters said it had targeted the FBI in response to a May 2026 agency announcement that detailed ShinyHunters’ methods and advised targets not to pay. uncertain
that → post → targets
It said it had stolen data “on almost ALL FBI Agents, and individuals who filed an application with the FBI for a job”. asserted
who → say → job
As proof, the group offered what it said was a screenshot of a vandalised FBI job site and what the group said was information on roughly 5,000 agents it said was a sample of the overall stolen data set. asserted
it → offer → set
Reuters could not verify the authenticity of the screenshot, but the job site did appear to have experienced recent disruption. uncertain
site → verify → disruption
A message posted to the site on Sept 22 said that both it and the FBI “Special Agent Applicant Portal” were “currently unavailable”. asserted
it → post → Sept
The data sample appeared to contain information about FBI agents’ names, home addresses, Social Security numbers, their assignments and, in at least some cases, the names of their family members. asserted
sample → appear → members
Reuters was able to partially verify the authenticity of the information by running the details, including the Social Security numbers, against credit bureau records and previously breached data preserved by the dark-web intelligence firm District 4 Labs. asserted
Reuters → verify → firm
In at least 10 instances – including in the case of FBI Director Kash Patel – Reuters found details that appeared to match. asserted
that → include → details
A person familiar with the matter said that the job descriptions in the data also matched in at least some cases. asserted
descriptions → say → cases
However, the news agency could not establish where the data came from, or whether it had been stolen from the FBI’s internal systems as the hackers claimed. uncertain
hackers → establish → systems
Attempts to reach the people whose details were in the sample data were unsuccessful. asserted
details → reach → data
Past thefts were harmful Cynthia Kaiser, a former FBI official, said breaches like the ones claimed by ShinyHunters were “incredibly harmful” because they could be used by criminals to expose and put pressure on the people investigating them. uncertain
they → say → them
Kaiser, now senior vice president at cybersecurity firm Halcyon, noted that an old leak dating back to 2016 was still occasionally used today to harass FBI agents. asserted
leak → note → agents
“Once that information is stolen, it is used forever,” she said. asserted
she → steal → ?
ShinyHunters is one of the world’s most notorious and attention-seeking hacking crews. asserted
ShinyHunters → seek → crews
Its recent break-ins include the purported theft of millions of business records from video game developer Rockstar Games, the maker of Grand Theft Auto, and a May intrusion centred on education tool Canvas that caused widespread disruption across US schools. uncertain
that → include → schools
Earlier in September, AI company Anthropic said it had caught ShinyHunters-linked hackers trying to use its tools. asserted
hackers → say → tools
On Sept 20, the group told Reuters it had gone to war against another notorious cybercrime group, cl0p, in a rare bout of public score-settling. asserted
it → tell → settling
💬Give feedback
🕘History 🎫Support