FBI says contractor failure led to hack of its jobs website

Read the original at NBC News ↗
NBC News · collected 2026-10-06 · by Dareh Gregorian

Quick Summary

The FBI has concluded that a contractor’s failure to implement a security patch led to the hack of its jobs portal last month, according to an internal review. Assistant Director Brett Leatherman stated that the FBIJobs.gov breach allowed cyber-extortion group ShinyHunters access to between 2 and 3 terabytes of files, though this claim was not independently verified by NBC News. The FBI has since removed the contractor from the project and arrested one member of ShinyHunters in coordination with Dutch authorities on September 15.
Written locally by qwen2.5:14b on 2026-10-06, using this article's own text rather than the other coverage of the same event (that is the story summary below).

AI analysis runs on qwen2.5:14b, locally

Story summary

FBI removed an Accenture contractor on October 5 following a data breach that exposed sensitive information of thousands of bureau employees, according to sources familiar with the matter. The breach occurred due to a failure by the contractor to implement a security patch for Oracle’s PeopleSoft human resources platform. FBI Cyber Division Assistant Director Brett Leatherman stated in a press release that the incident resulted from a security lapse managed by a third-party organization after the contractor neglected critical system updates, leading to unauthorized access and data theft of between 2 to 3 terabytes. The agency has taken steps to mitigate further risks and protect its workforce while also initiating legal actions against those responsible.

Written for “FBI Data Breach Incident” on 2026-10-06, grounded in this article and the 1 other(s) covering the same event.
Why this leaning score
This article does not take a side on a contested political question, so it has no leaning score. That is an answer rather than a gap: a match report or a rescue can be warmly or critically written without being left or right, and scoring it anyway is how approval of a subject gets recorded as a political position.
No political leaning scored for article 60868 · logged 2026-10-06

Signals How these are calculated →

Claims extracted
16
claim-shaped sentences
Uncertain
12%
2 of 16 hedged
Leaning
not political
takes no side on a contested political question
Correction & hedging signals
95.2
corrections and hedging in what we collected; not a measure of accuracy
Outlets on this story
2
Crime & Law
Narrative spread
1
articles carrying this framing
Analyzed 2026-10-06 · how these are computed

Story

📰 FBI Data Breach Incident
Crime & Law · 2 article(s) covering the same event. See how they differ ↓

How this is being covered How these are calculated →

Article leaning vs. publisher reliability
Source leaning vs. consistency

Compared with similar articles

This article reads unscored and hedges 12% of its claims. Each row says how that neighbour differs.
CBS News
⚖️ leaning not scored 🔴 33% hedged 4 of 12 📰 publisher trust 66
“Article A discusses the detention of a ShinyHunters member and their cooperation with FBI, while Article B addresses the cause of the FBI's jobs website hack due to a contractor's failure.”
The Straits Times
⚖️ leaning not scored 🔴 9% hedged 1 of 11 📰 publisher trust 59
“Both articles describe the removal of an Accenture contractor from the FBI due to a data breach caused by failing to update system security.”

Publisher

NBC News · 1049 article(s) · 0 correction(s) detected
No corrections detected for this publisher. That may mean careful reporting, or simply that nothing has been checked.

Who wrote this

Dareh Gregorian
4 article(s) here · 1 carrying a prediction
🔮 We will continue to bring the responsible parties to justice, with multiple arrests already occurring.
🔮 “What city would that be in?” a confused-looking Smith replied.
🔮 They said West is concerned that Gabriel might not get the medical care he needs if he remains in the custody of his parents, Omar Ahmed and Nausheen Gilkar.
🔮 The rushed time frame being pushed by the administration will make voter disenfranchisement “practically inevitable” if the rule is allowed to stay in place, the judge found.
Also by Dareh Gregorian
Nothing else under this byline is closely related to this article, so these are simply their most recent.

Topics

FBI FBIJobs.gov NBC News ShinyHunters WASHINGTON

Subjects

FBI ORG · 7× ShinyHunters ORG · 6× FBIJobs.gov ORG · 2× NBC News ORG · 2× @FBI ORG · 1× Brett Leatherman PERSON · 1× Cyber Division ORG · 1× Kash Patel PERSON · 1× Leatherman ORG · 1× WASHINGTON GPE · 1×

Narrative

“To date, our review has determined that the incident occurred as the result of a security failure of a platform managed by a third-party organization — after a contractor failed to implement a security patch explicitly issued to secure the platform,” Cyber Division Assistant Director Brett Leatherman said in a statement Tuesday.
framing: assertive · carried by 1 article(s) · first seen 2026-10-06
🔮 We will continue to bring the responsible parties to justice, with multiple arrests already occurring.
2026-10-06 · NBC News
FBI says contractor failure led to hack of its jobs website · assertive framing

Claims (16 extracted, 2 hedged)

The FBI’s internal review of a hack of its jobs portal last month has so far determined that a “security failure” by a contractor managing the site caused the breach. asserted
failure → determine → breach
“To date, our review has determined that the incident occurred as the result of a security failure of a platform managed by a third-party organization — after a contractor failed to implement a security patch explicitly issued to secure the platform,” Cyber Division Assistant Director Brett Leatherman said in a statement Tuesday. asserted
Leatherman → determine → statement
The statement said the FBI has removed the contractor, which it did not identify, “and taken all necessary steps to both mitigate any further risk and protect our workforce. asserted
it → say → workforce
We will continue to bring the responsible parties to justice, with multiple arrests already occurring. asserted
arrests → continue → justice
The hack of the FBIJobs.gov portal took place late last month, and ShinyHunters, a cyber-extortion outfit, claimed credit for it. asserted
ShinyHunters → take → it
A representative of the group told NBC News at the time that it used the job portal to gain access to other agency programs, stealing between 2 and 3 terabytes of files. asserted
it → tell → files
NBC News was not able to verify the extent of the claims. uncertain
News → verify → claims
Leatherman’s statement appeared to confirm that the agency believes ShinyHunters is responsible. asserted
ShinyHunters → appear → ?
“The FBI will aggressively investigate this cyber incident involving FBIjobs.gov and the cyber-criminal group ShinyHunters with all available resources,” his statement said. asserted
statement → investigate → resources
FBI Director Kash Patel announced on social media last week that a member of the group had been arrested. asserted
member → announce → group
The arrest took place on Sept. 15, a week before ShinyHunters claimed credit for the attack. asserted
ShinyHunters → take → attack
“This morning @FBI and our partners the Dutch National Police are announcing the arrest of one of the alleged leaders of ShinyHunters — a global cybercrime and threat actor group linked to cyberattacks in the United States, the Netherlands, and around the world,” he wrote. asserted
he → announce → world
“As we speak FBI teams are actively working with partners to obtain and execute more leads in the ongoing investigation based on this arrest,” his post on X said. asserted
post → speak → X
Some FBI employees were upset to have learned about the hack from the media and said the agency had been slow to respond, a person familiar with the agency’s communications said last week. asserted
person → upset → communications
The FBI had said in a previous statement that is “in regular communication with anyone who may be impacted,” and that the agency “treats the security of its information and the safety of its workforce as top priorities.” ShinyHunters is a loosely defined group, with members scattered around the globe. uncertain
members → say → globe
It routinely hacks companies to steal their data and threatens to publish it on the dark web if not paid. asserted
It → hack → web
💬Give feedback
🕘History 🎫Support