The hackers behind the massive FBI breach told 404 Media on Monday they do not intend to publish the data.
asserted
they → tell → data
The breach, in which the hackers stole personal information on “all FBI employees and applicants” including physical addresses, job roles, names of spouses, and medical records, represents a significant national security and counterintelligence threat.
asserted
hackers → steal → threat
Criminals in the same ecosystem as the hacking group, called ShinyHunters, have previously used hacked phone data to track and harass the FBI agents investigating them.
asserted
Criminals → hack → them
When 404 Media first broke news of the breach, the group sent the personal data of an agent and their spouse who they said was investigating the group.
asserted
they → break → group
Although any potential damage will be less if ShinyHunters doesn’t publish the data publicly, the theft happening at all still presents much of those same national security risks, with the data providing granular insight into how the FBI operates.
“Since the very beginning we had made our decision that we would never publish this data.
asserted
we → publish → data
We have never intended to nor have we ever planned to,” a representative of ShinyHunters told 404 Media on Monday.
asserted
representative → intend → Monday
Last week, ShinyHunters provided 404 Media with a sample list of 5,000 FBI officials, in many cases including details on their spouses too.
asserted
ShinyHunters → provide → spouses
404 Media verified this data by cross-referencing it with open source records available in the research tool OSINT Industries, and previously compromised data in Darkside, a tool made by cybersecurity company District 4.
asserted
Media → verify → District
At the time of the breach, the ShinyHunters representative said the exfiltrated data totalled between two and three terabytes.
asserted
data → say → terabytes
In a since-deleted announcement posted to their leak site, ShinyHunters wrote, “All FBI data was compromised including PII/PHI [personally identifiable information and protected health information] on incumbent and former FBI employees and all applicant information.
asserted
data → delete → employees
We have a lot more than we claim here.”
uncertain
we → have → more
ShinyHunters said on its site that it was “allowing you [the FBI] a time of 1 week to correct” or remove a previously published FBI report.
asserted
it → say → report
In that report, the FBI said that ShinyHunters exaggerates its claims of access to sensitive data to elicit payment, and that the group sends threatening text messages and phone calls to victims and their families.
uncertain
group → say → victims
Typically, ShinyHunters extorts victims by threatening to publish their data online if the target organization doesn’t pay up.
asserted
organization → extort → data
In the new statement on Monday, ShinyHunters told 404 Media “Since the very beginning of this event we have unequivocally and assiduously emphasised this is NOT extortion, this is NOT ransom, this is NOT financially motivated.
asserted
this → tell → event
However, the public and media has misinterpreted this for an extortion and have assumed that if the victim entity does not comply within 1 week which we all know including ourselves that they would never comply, we would publish all the data.”
asserted
we → misinterpret → data
“This was all a marketing campaign to protect our business and actively combat disinformation.
asserted
This → protect → disinformation
If we made this statement normally then this much attention to our words and intentions would’ve never been this widespread.
asserted
attention → make → words
We’d have been ignored and disregarded.
asserted
We → ignore → ?
However, now everyone knows what the issue is and what we are doing.
asserted
we → know → what
Everyone is reading about it.
asserted
Everyone → read → it
We proved our points on several occasions.
asserted
We → prove → occasions
We do not care what the public says and we are not affected by it nor do we cloud our judgement by external opinions and thoughts,” the statement added.
asserted
statement → care → opinions
The FBI told 404 Media in a statement “The FBI is working around the clock to investigate the cyber incident involving FBIJobs.gov and is in regular communication with anyone who may be impacted — including multiple Bureau wide communications within 24 hours of public reporting.
uncertain
who → tell → reporting
The FBI treats the security of its information and the safety of its workforce as top priorities, and our investigation is ongoing.
asserted
investigation → treat → priorities
Last week, Reuters reported some of the personnel in the 5,000 officials sample include those assigned to investigate China or Russia, presenting a serious national security threat.
asserted
some → report → threat
404 Media found the hack also exposed the names and personal data of some members of the FBI’s secretive hacking team, called the Remote Operations Unit.
asserted
hack → find → team
The BBC reported the breach included Special Agents’ blood and urine test results.
asserted
breach → report → results
Reuters reported the hack also impacted mental health evaluations.
asserted
hack → report → evaluations
“We again want to emphasise that this is not extortion, it was never one to begin with, not a threat, not a ransom, and not financially motivated.
asserted
it → want → ?
Nothing will happen.
asserted
Nothing → happen → ?
We are way past this situation in our business’s operations and we confidently believe we have been successful due to seeing a recent influx of success in our operations,” ShinyHunters told 404 Media on Monday.
asserted
ShinyHunters → believe → Monday
The data of 5,000 FBI employees has spread, though.
asserted
data → spread → employees
On its site ShinyHunters said it only provided the data to “a select group of prominent U.S. media organizations solely to verify our claims.”
uncertain
it → say → claims
Soon after, the cybersecurity researcher and YouTuber John Hammond said they obtained a copy too.
asserted
they → say → copy
Hammond declined to tell 404 Media how he obtained the data when asked last week.
asserted
he → decline → data
This information, as well as the alleged two to three terabytes of overall stolen data, is likely of high interest to foreign intelligence agencies, potentially making anyone who has obtained it a target.
asserted
who → allege → it
In a separate case that shows the potential danger of stolen data, a man linked to the hack of all AT&T customer metadata records communicated with an email address he believed belonged to a foreign country’s military intelligence service, and attempted to sell the data to that country, 404 Media previously reported.
asserted
Media → show → country
Asked last week if ShinyHunters planned on selling the hacked FBI data to a foreign intelligence agency, the representative said, “No definitely not.”
asserted
representative → ask → agency
On Monday, the New York Times reported the FBI sent a memo to staff saying it would offer virtual briefings and instructed employees to remain vigilant while at home and their place of work.
asserted
it → report → work
…and 5 more, not listed.
The Aporia
