cyber.hendryadrian.com
Cyber Attack & Data Breach · securityweek.com

ShinyHunters Claims FBI Breach; FBI Investigating Alleged Data Theft

· Original article ↗

Summary

ShinyHunters claims it breached FBI systems and stole data, including information allegedly belonging to agents and applicants. The FBI is investigating; some data in a sample appeared authentic, but its origin is unconfirmed.

Key points

  • ShinyHunters claims it accessed FBI Criminal Justice, HR, and Medlink services and obtained data on agents and job applicants.
  • The group defaced a subdomain of fbijobs[.]gov; the site was reported down for maintenance.
  • The FBI said it was aware of claims of unauthorized activity affecting FBIjobs.gov and is investigating.
  • ShinyHunters gave 404 Media a sample said to contain personal information for 5,000 FBI employees; reviewers said some data appeared authentic, but its origin is unconfirmed.
  • The group claims it exploited an Oracle PeopleSoft zero-day and stole 2–3 TB of information; the article says it is unclear whether the FBI attack involved a new vulnerability or the previously reported flaw CVE-2026-35273.

Article Details

Victim Organization
FBI
Incident Type
Alleged breach of FBI systems, with a reported defacement of a subdomain on the FBI jobs website
Data Types Exposed
  • Names
  • Phone numbers
  • Home addresses
Affected Records
ShinyHunters provided a sample allegedly representing personal information of 5,000 FBI employees; the data’s origin has not been confirmed.
Affected Data Size
ShinyHunters alleged it stole 2–3 TB of information.
Operational Impact
The FBI jobs website subdomain was defaced and was reported down for maintenance. The FBI said it was investigating claims of unauthorized activity.
Ransom Or Extortion
ShinyHunters demanded that the FBI correct or remove its report within one week. The group characterized its statement as an exercise of First Amendment rights and denied that it was ransom, coercion, or extortion.
Claim Status
alleged

CVE

CVE-2026-35273Oracle Corporation · PeopleSoft Enterprise PeopleToolsIt’s unclear whether the cybercrime group found a new zero-day or targeted the FBI through the same vulnerability, tracked as CVE-2026-35273.

Threat Actors

ShinyHuntersClaimed responsibility for breaching FBI systems and said it exploited a zero-day vulnerability in Oracle PeopleSoft; the claims remain under FBI investigation.

Vendors

OracleThe hackers told 404 Media that they exploited a zero-day vulnerability in Oracle’s PeopleSoft product to breach FBI systems, from which they allegedly stole 2-3 TB of information.

Products

PeopleSoftThe hackers told 404 Media that they exploited a zero-day vulnerability in Oracle’s PeopleSoft product to breach FBI systems, from which they allegedly stole 2-3 TB of information.

Related Articles