Cyber-criminals claiming affiliation with ShinyHunters have stolen sensitive medical records from the FBI, including blood and urine test results for thousands of special agents. The breach includes personal information such as full names, addresses, badge numbers, and job titles. Experts warn that this data could be used for blackmail, scams, or impersonating law enforcement officers. ShinyHunters posted samples of the stolen data on darknet sites and made an unusual demand for a retraction of an FBI advisory rather than seeking ransom. The extent of the breach may involve up to 60,000 current and former FBI staff members.
Written locally by qwen2.5:14b on 2026-09-25,
using this article's own text rather than the other coverage of the
same event (that is the story summary below).
Story summary
ShinyHunters, a notorious hacking group, claimed on September 22 that they breached the FBIjobs.gov website and stole personal data from thousands of current and former FBI employees. The hackers obtained sensitive information such as names, home addresses, phone numbers, email addresses, and dates of birth for many agents and job applicants. ShinyHunters defaced the FBI's jobs portal with a mocking message that included President Trump’s signature phrase "Thank you for your attention to this matter," implying retaliation against his administration.
The FBI acknowledged unauthorized activity affecting their job application site but did not confirm the theft of data. Reuters partially verified some stolen information by cross-referencing it with credit bureau records and previous breaches, finding matches in at least nine cases. The hackers threatened further action if the FBI does not address what they see as false allegations against them.
The breach potentially impacted a significant number of individuals who applied for or held positions within the FBI since 2017 when the site became the primary application platform for agent and support roles. The full extent of data compromised remains unclear, but ShinyHunters shared what they claim is a small sample dataset involving approximately 5,000 individuals.
Written for “FBI Data Breach” on 2026-10-05,
grounded in this article and the 22 other(s) covering the same event.
- Published
Cyber-criminals who hacked the FBI say they have extremely sensitive medical data for thousands of its special agents.
asserted
they → publish → agents
BBC News has seen samples of the stolen "fitness-for-work" medical examinations, which contain information such as blood and urine test results, and doctors' notes mentioning conditions such as a "shellfish and banana allergy".
asserted
which → see → allergy
The records include agents' full names and addresses, as well as references to medical concerns including 'blood in the urine' and 'high cholesterol'.
asserted
records → include → urine
Experts say the hack - which the FBI is investigating - could leave agents vulnerable to scams, blackmail and targeted attacks, as well as help criminals impersonate law enforcement officers.
"
uncertain
criminals → say → officers
The list maps thousands of agents against their medical and fitness records," said Etay Maor, vice-president of threat intelligence at Cato Networks.
asserted
Maor → map → Networks
"Passwords can be reset if stolen, but medical records cannot, so once this data is out, it stays compromised for good.
asserted
it → reset → ?
That permanence, applied across an entire workforce, is what makes this leak so serious."
The FBI has not responded to requests for comment.
asserted
FBI → apply → comment
However, on Wednesday it acknowledged the breach and said it was "aggressively investigating" how it happened.
asserted
it → acknowledge → breach
The cyber-criminal group ShinyHunters claims it breached FBI systems on Monday, and later posted details of the attack on its darknet site.
uncertain
it → claim → site
The group also shared samples of the alleged stolen data with reporters, along with an extortion demand.
asserted
group → share → demand
Unusually, the hackers are not demanding money.
asserted
hackers → demand → money
Instead, they are seeking a retraction of an FBI advisory published in May, which they claim "offended" them.
uncertain
they → seek → them
The samples shared with journalists appear genuine and include names, addresses, phone numbers, badge numbers, job titles and information about spouses.
asserted
samples → share → spouses
The records appear to relate to thousands of agents, including senior officials such as deputy directors.
asserted
records → appear → directors
Professor Ciaran Martin, the former head of the UK's National Cyber Security Centre, has described the hack - if confirmed - "as serious as it gets when it comes to data breaches."
asserted
it → describe → breaches
The news agency Reuters reports that some of the data includes information on agents, external involved in investigations relating to Russia, China and drug cartels.
asserted
some → report → Russia
Reporting by 404 Media suggests details of a previously little-known FBI hacking unit may also have been exposed, external.
uncertain
details → report → unit
It was initially thought the breach affected the FBI's 38,000 current employees, but the hackers now claim the number could be far higher.
uncertain
number → think → employees
The group says it underestimated the scale of the data theft and now claims to hold sensitive information on around 60,000 current and former FBI staff.
uncertain
it → say → staff
Jamie Akhtar, chief executive and co-founder of CyberSmart, said the hackers' claims should be treated with caution but that the breach appeared to be extremely concerning.
uncertain
breach → say → caution
"Such data could be used for highly convincing phishing, impersonation, identity fraud, blackmail or even operations targeting law-enforcement personnel, making the potential implications particularly serious," he said.
uncertain
he → use → personnel
The hackers, who communicate with reporters in English via the messaging service, Telegram, say they will publish the full dataset in five days unless the FBI meets their demands.
asserted
FBI → communicate → demands
ShinyHunters is an international hacking collective that has been active since 2019 and has been linked to a number of high-profile cyber-attacks, including incidents affecting Rockstar Games and the education platform Canvas.
asserted
that → link → Games
The group claims it exploited a vulnerability in an Oracle cloud storage system used by the FBI, gaining access to multiple platforms including FBIJobs, FBI BEAST, which handles background checks on employees and applicants, FBI MedLink, which stores medical records, and FBI BICS, which contains investigative information.
uncertain
which → claim → information
In a statement posted on X, the FBI said it was still trying to determine whether the hackers had breached its systems directly or compromised a third-party provider.
asserted
hackers → post → provider
"We are actively and aggressively investigating this matter and working closely with those third-party providers that support FBIJobs.gov to mitigate any and all risk," the statement said.
asserted
statement → investigate → risk
The Aporia
