ShinyHunters Claims FBI Breach Exposed Agents’ Medical Records
Summary
ShinyHunters claims it stole FBI staff medical and personal records, including blood-test results and doctors’ notes. The FBI has acknowledged an incident affecting FBIJobs-related systems and is investigating; it has not confirmed what was accessed or who was affected.
Key points
- The BBC reports seeing samples of medical examination records that appear genuine and identify FBI agents by name and address.
- The samples reportedly contain blood and urine test results, doctors’ notes, contact details, badge numbers, job titles, and information about spouses.
- ShinyHunters claims access to FBI MedLink and BEAST systems and says it holds sensitive information on about 60,000 current and former staff.
- The FBI has acknowledged an incident affecting FBIJobs-related systems but has not confirmed the scope or whether its own environment or a third-party provider was compromised.
- ShinyHunters says it will release the data within five days unless the FBI retracts or removes an advisory it disputes.
- The article advises potentially affected people to follow FBI updates, change reused passwords, enable phishing-resistant two-factor authentication where possible, and watch for impersonation attempts.
Article Details
- Victim Organization
- Federal Bureau of Investigation (FBI)
- Incident Type
- Alleged breach and theft of sensitive personnel and medical information
- Data Types Exposed
- Medical examination reports
- Blood and urine test results
- Doctors’ notes and medical histories
- Names
- Addresses
- Phone numbers
- Badge numbers
- Job titles
- Information about spouses
- Staff identity and contact data
- Background-check information (claimed)
- Affected Records
- ShinyHunters claims to hold sensitive information on around 60,000 current and former FBI staff; the FBI has not confirmed the number.
- Operational Impact
- The FBI acknowledged an incident affecting FBIJobs-related systems and said it was investigating whether its environment or a third-party provider was compromised. ShinyHunters claims it accessed FBI MedLink and FBI BEAST; the FBI has not confirmed those claims.
- Ransom Or Extortion
- ShinyHunters made a non-financial demand for the FBI to retract or remove a May advisory it calls false and defamatory, and said it would release the data within five days if its demand was not met.
- Claim Status
- alleged
Threat Actors
Products
FBI BEASTclaims it accessed several systems, including FBI MedLink, which stores medical records, and FBI BEAST, which handles background checks on employees and applicants, but the FBI has not confirmed these claims.FBI MedLinkShinyHunters claims it accessed several systems, including FBI MedLink, which stores medical records, and FBI BEAST, which handles background checks on employees and applicants, but the FBI has not confirmed these