Cyber group claims it hacked the FBI and stole personal info on 5,000 employees

Read the original at The Independent ↗
The Independent · collected 2026-09-23 · by Eric Tucker

Quick Summary

A criminal cyber group called ShinyHunters claims to have hacked the FBI’s recruitment website, FBIjobs.gov, stealing sensitive data on nearly 5,000 agents and job applicants. The FBI confirmed unauthorized activity but declined further comment, stating they are investigating. In a message directed at FBI officials, ShinyHunters demanded the bureau retract its characterization of them as cyber criminals involved in large-scale data breaches and extortion. The FBIjobs website was offline during this incident.
Written locally by qwen2.5:14b on 2026-09-23, using this article's own text rather than the other coverage of the same event (that is the story summary below).

AI analysis runs on qwen2.5:14b, locally

Story summary

ShinyHunters, a notorious hacking group, claimed on September 22 that they breached the FBIjobs.gov website and stole personal data from thousands of current and former FBI employees. The hackers obtained sensitive information such as names, home addresses, phone numbers, email addresses, and dates of birth for many agents and job applicants. ShinyHunters defaced the FBI's jobs portal with a mocking message that included President Trump’s signature phrase "Thank you for your attention to this matter," implying retaliation against his administration.

The FBI acknowledged unauthorized activity affecting their job application site but did not confirm the theft of data. Reuters partially verified some stolen information by cross-referencing it with credit bureau records and previous breaches, finding matches in at least nine cases. The hackers threatened further action if the FBI does not address what they see as false allegations against them.

The breach potentially impacted a significant number of individuals who applied for or held positions within the FBI since 2017 when the site became the primary application platform for agent and support roles. The full extent of data compromised remains unclear, but ShinyHunters shared what they claim is a small sample dataset involving approximately 5,000 individuals.

Written for “FBI Data Breach” on 2026-10-05, grounded in this article and the 22 other(s) covering the same event.

Signals How these are calculated →

Claims extracted
13
claim-shaped sentences
Uncertain
31%
4 of 13 hedged
Leaning
not political
takes no side on a contested political question
Correction & hedging signals
58.8
corrections and hedging in what we collected; not a measure of accuracy
Outlets on this story
23
Crime & Law
Narrative spread
1
articles carrying this framing
Analyzed 2026-09-23 · how these are computed

Story

📰 FBI Data Breach
Crime & Law · 23 article(s) covering the same event. See how they differ ↓

How this is being covered How these are calculated →

Article leaning vs. publisher reliability
Source leaning vs. consistency

Compared with similar articles

This article reads unscored and hedges 31% of its claims. Each row says how that neighbour differs.
The Guardian · 0.87 cosine similarity
⚖️ leaning not scored 🔴 42% hedged 5 of 12 📰 publisher trust 60
“Both articles describe an identical incident involving a cyber breach of FBIjobs.gov and claims by hackers to have stolen sensitive data on nearly all agents and job applicants.”
NBC News · 0.85 cosine similarity
⚖️ leaning not scored 🔴 36% hedged 9 of 25 📰 publisher trust 95
“Both articles report on the same alleged hacking incident involving the FBI's recruitment website, with similar timing and content.”
ABC News (US)
⚖️ leaning not scored 🔴 67% hedged 8 of 12 📰 publisher trust 59
“Both articles describe the same cyber attack on FBIjobs.gov and mention similar details about the stolen data, including medical information.”
CBS News · 0.85 cosine similarity
⚖️ leaning not scored 🔴 33% hedged 10 of 30 📰 publisher trust 66
“Both articles report on a cyber group claiming to have hacked the FBI's recruitment website and stolen data on employees and job applicants, with similar dates and details about the breach.”
The Sydney Morning Herald · 0.85 cosine similarity
⚖️ leaning not scored 🔴 28% hedged 8 of 29 📰 publisher trust 61
“Both articles describe a cyber attack on the FBI's recruitment website, where a hacking group claims to have stolen sensitive data on approximately 5000 employees and job applicants.”
Daily Mail
⚖️ leaning not scored 🔴 20% hedged 4 of 20 📰 publisher trust 65
“Both articles describe the same hacking incident involving ShinyHunters claiming to have stolen personal data from FBI agents and applicants on the FBI's jobs website.”
ABC News (AU)
⚖️ leaning not scored 🔴 32% hedged 7 of 22 📰 publisher trust 61
“Both articles describe the same hacking incident by ShinyHunters targeting the FBI's recruitment website and data of current and former employees.”
The Straits Times
⚖️ leaning not scored 🔴 29% hedged 6 of 21 📰 publisher trust 59
“Both articles describe the same cyber attack claimed by ShinyHunters on the FBI's recruitment website and the FBI's acknowledgment of unauthorized activity.”
Times of India
⚖️ leaning not scored 🔴 22% hedged 5 of 23 📰 publisher trust 59
“Both articles describe the same cyberattack on FBIjobs.gov by ShinyHunters, with similar claims and responses from the FBI.”
The Hindu
⚖️ leaning not scored 🔴 62% hedged 5 of 8 📰 publisher trust 60
“Both articles describe ShinyHunters claiming to have breached the FBI's recruitment website and stolen data on thousands of employees, referring to the same timeframe and incident.”

Publisher

The Independent · 1624 article(s) · 4 correction(s) detected
Running correction rate · 4 correction(s)
2026-10-03
Prison chief to resign after shock botched execution of Christa Pike
2026-09-22
Costa Rican man complained of lack of care for diabetes before his death in ICE custody, family says
2026-09-17
Killer who gunned down famed Elvis impersonator set to be executed tonight
2026-09-04
Pennsylvania confirms second death of child with measles after RFK Jr. told CDC director to delete numbers

Who wrote this

Eric Tucker
5 article(s) here · 1 carrying a prediction
🔮 Despite promising during his confirmation hearing last year that he would not look "backward," Patel has promoted inquiries into past senior officials and driven multiple waves of dismissals. Those ousted include staff involved in previous investigations of President Donald Trump, agents photographed taking a knee at a 2020 racial justice demonstration, and contributors to a controversial analytical memo on Catholic extremism.
🔮 It remains uncertain whether any indictments will ultimately be brought, or what specific information has been gathered to substantiate claims of a government plot against Trump by the officials who investigated him.
🔮 I am confident Director Patel will continue to reform the FBI, combat violent crime, defend the homeland, ensure strong organizational accountability, and restore public trust in this institution of excellence," Bailey wrote.
🔮 Ohio Republican Party Chairman Alex Triantafilou recently told The Associated Press that he hoped Trump would visit his state, where he won by 11 percentage points in 2024.
🔮 These claims could not immediately be verified, and an FBI spokesperson declined to comment further.
Also by Eric Tucker
Nothing else under this byline is closely related to this article, so these are simply their most recent.

Topics

FBI FBIjobs.gov Independent ShinyHunters pro-Iranian

Subjects

FBI ORG · 9× ShinyHunters ORG · 4× FBIjobs.gov ORG · 1× Independent NORP · 1× Kash Patel PERSON · 1× Patel PERSON · 1× pro-Iranian NORP · 1×

Narrative

The message, directed to FBI Director Kash Patel and the assistant director in charge of the FBI's cyber division, stated the group had "compromised very sensitive data on almost ALL FBI Agents and individuals who filed an application with the FBI for a job."
framing: mixed · carried by 1 article(s) · first seen 2026-09-23
🔮 These claims could not immediately be verified, and an FBI spokesperson declined to comment further.

Claims (13 extracted, 4 hedged)

Federal authorities are probing an apparent breach of the FBI’s recruitment website after a criminal cyber group claimed to have accessed "very sensitive data" on nearly all agents and job applicants. asserted
group → probe → agents
"The FBI is aware of claims regarding unauthorized activity affecting FBIjobs.gov and is currently investigating," the bureau said in a statement. uncertain
bureau → regard → statement
The site, the primary portal for prospective employees to learn about positions and apply, remained offline Wednesday morning. asserted
employees → learn → positions
An online message from a hacking collective known as ShinyHunters claimed responsibility for the incident. asserted
message → know → incident
The message, directed to FBI Director Kash Patel and the assistant director in charge of the FBI's cyber division, stated the group had "compromised very sensitive data on almost ALL FBI Agents and individuals who filed an application with the FBI for a job." asserted
who → direct → job
These claims could not immediately be verified, and an FBI spokesperson declined to comment further. uncertain
spokesperson → verify → ?
An email sent to an address associated with the organization was not immediately returned. asserted
email → send → organization
ShinyHunters stated it was giving the bureau one week to correct or remove allegations from a May public service announcement that described the network as a "cyber criminal group specializing in large-scale data breaches and extortion. uncertain
that → state → breaches
That announcement characterized ShinyHunters as "threat actors" who often "use their real or exaggerated claims of access to sensitive or personal information to prompt payment from victims," routinely harass targets, and "may falsely claim to have sensitive or compromising information, including embarrassing photographs or videos of victims, which frequently do not exist." uncertain
which → characterize → victims
In its message, ShinyHunters claimed it was "offended" by those characterizations and demanded the bureau retract them. asserted
bureau → claim → them
The FBI has repeatedly been targeted by cyberattacks. asserted
FBI → target → cyberattacks
In March, the FBI disclosed an inquiry into "suspicious activities" on an internal system holding sensitive data related to surveillance operations and investigations. asserted
FBI → disclose → operations
That same month, a pro-Iranian hacking group claimed to breach an account belonging to Patel, publishing old photographs, a resume, and personal documents online. asserted
group → claim → photographs
💬Give feedback
🕘History 🎫Support