ShinyHunters, a hacking group, claims it breached the FBI's job application website, stealing over 2 terabytes of data containing personal information on thousands of FBI employees and applicants. This includes details such as names, agent status, email addresses, phone numbers, home addresses, and in some cases, spouses' Social Security numbers. The FBI is investigating unauthorized activity on its site but has not confirmed the stolen data's legitimacy or extent independently. Cybersecurity experts warn that if verified, this breach could pose long-term risks to individuals involved and their families due to potential circulation of sensitive information among criminal groups.
Written locally by qwen2.5:14b on 2026-09-23,
using this article's own text rather than the other coverage of the
same event (that is the story summary below).
Story summary
ShinyHunters, a notorious hacking group, claimed on September 22 that they breached the FBIjobs.gov website and stole personal data from thousands of current and former FBI employees. The hackers obtained sensitive information such as names, home addresses, phone numbers, email addresses, and dates of birth for many agents and job applicants. ShinyHunters defaced the FBI's jobs portal with a mocking message that included President Trump’s signature phrase "Thank you for your attention to this matter," implying retaliation against his administration.
The FBI acknowledged unauthorized activity affecting their job application site but did not confirm the theft of data. Reuters partially verified some stolen information by cross-referencing it with credit bureau records and previous breaches, finding matches in at least nine cases. The hackers threatened further action if the FBI does not address what they see as false allegations against them.
The breach potentially impacted a significant number of individuals who applied for or held positions within the FBI since 2017 when the site became the primary application platform for agent and support roles. The full extent of data compromised remains unclear, but ShinyHunters shared what they claim is a small sample dataset involving approximately 5,000 individuals.
Written for “FBI Data Breach” on 2026-10-05,
grounded in this article and the 22 other(s) covering the same event.
The FBI is investigating an apparent cyberattack on its job application website after the hacking group ShinyHunters claimed it stole more than 2 terabytes of data containing sensitive personal information about thousands of FBI employees and job applicants.
asserted
it → investigate → employees
The bureau confirmed that it was investigating unauthorised activity affecting FBIjobs.gov, while the website’s Special Agent applicant portal was unavailable on Tuesday.
asserted
portal → confirm → Tuesday
ShinyHunters claimed on its dark-web site that it had obtained “very sensitive data” on almost all FBI agents and people who had applied for jobs with the bureau.
asserted
who → claim → bureau
The group also claimed it had accessed the FBI’s criminal justice, human resources and other systems.
asserted
it → claim → justice
However, Axios said it could not independently verify whether the stolen data was legitimate or current.
uncertain
data → say → ?
Cybersecurity researchers told the publication that the attack itself appeared legitimate, while 404 Media obtained a sample of the alleged stolen data that appeared to contain information on about 5,000 people identified as FBI agents.
asserted
that → tell → agents
What hackers claim they stole
According to Axios, ShinyHunters said the data included names, agent status, email addresses, phone numbers, home addresses and, in some cases, information about spouses, including Social Security numbers.
uncertain
data → claim → numbers
The group also claimed it used a zero-day vulnerability in Oracle’s PeopleSoft platform to access and deface the FBI’s jobs website.
asserted
it → claim → website
The site remained offline on Tuesday afternoon.
asserted
site → remain → afternoon
Cybersecurity experts told Axios that the potential exposure could pose a long-term risk to FBI employees and their families if the information is circulated among other criminal groups or sold on the dark web.
uncertain
information → tell → web
Allan Liska, a threat intelligence analyst at Recorded Future, told Axios that the data was likely to be repeatedly downloaded and shared with other threat actors if it had been obtained as claimed.
asserted
it → tell → actors
Andrew Brandt, principal threat intelligence incident commander at Huntress, said the biggest concern was whether ShinyHunters would sell the information to criminal or state-sponsored hackers.
asserted
ShinyHunters → say → hackers
Why did ShinyHunters target the FBI?
asserted
ShinyHunters → target → FBI
The group claimed the attack was not financially motivated.
asserted
attack → claim → ?
Instead, it demanded that the FBI retract or revise statements the bureau made about its activities.
asserted
bureau → demand → activities
In a May advisory, the FBI warned that ShinyHunters commonly uses harassment tactics against victims and their families, including threatening calls and messages and, in some cases, swatting.
uncertain
ShinyHunters → warn → cases
ShinyHunters disputed the FBI’s description, telling Axios that other “low-skilled threat actors” had been carrying out attacks while using the group’s name.
asserted
actors → dispute → name
The FBI did not say whether it had confirmed the identity of the attackers or the extent of any data compromise.
asserted
it → say → compromise
The incident comes as US law enforcement agencies face repeated cyberattacks.
asserted
agencies → come → cyberattacks
CNN reported that the FBI investigated a separate suspected breach in March involving a sensitive network used to manage wiretaps and intelligence surveillance warrants.
asserted
FBI → report → wiretaps
Last month, hackers also leaked files they allegedly stole from the Justice Department’s Bureau of Alcohol, Tobacco, Firearms and Explosives.
uncertain
they → leak → Alcohol
CNN reported that the material appeared to contain sensitive information from past investigations.
asserted
material → report → investigations
The FBI has also faced cyber incidents in the past, including a 2023 breach of a computer system used by its New York field office for child sexual exploitation investigations.
asserted
FBI → face → investigations
The Aporia
