cyber.hendryadrian.com
Security News · thehackernews.com

FBI Arrests Another Suspect in ShinyHunters’ Jobs Portal Hack

· Original article ↗

Summary

The FBI arrested an unnamed Canadian suspect in Pennsylvania over alleged involvement in the theft of FBI data. The breach exposed employee information after a contractor failed to apply a security patch, the FBI said.

Key points

  • FBI Director Kash Patel announced the arrest on October 9; the suspect has not been named and no charges have been made public.
  • News reports citing unnamed sources say the Canadian citizen was arrested in Pennsylvania on suspicion of involvement in the theft of FBI data.
  • ShinyHunters claimed in September that it breached the FBI jobs portal and stole sensitive data. The FBI has not said whether the newly arrested suspect took part.
  • Reuters counted this as the third arrest made public since news of the breach emerged. Other suspected associates are reportedly still free.
  • A Reuters analysis of a sample shared by ShinyHunters found personal information about FBI employees, sensitive job-role details, and psychiatric and medical information.
  • The FBI said the breach followed a contractor’s failure to apply a security patch to a platform managed by an outside organization; the FBI removed the contractor.

Article Details

Event Type
Arrest of a suspected ShinyHunters co-conspirator in connection with the FBI jobs portal breach.
Impact
The breach exposed extensive personal information about FBI employees, sensitive job-role details, and psychiatric and medical information. The FBI attributed the breach to a contractor's failure to apply a security patch on a platform managed by an outside organization and said it had removed the contractor. The suspect has not been publicly named, and no charges have been made public.

People

Brett LeathermanFBI Cyber Division assistant director who said the breach followed a contractor's failure to implement a security patch.Kash PatelFBI Director who announced the arrest in a post on X.

Threat Actors

ShinyHuntersExtortion group that claimed responsibility for breaching the FBI's jobs portal; the FBI describes it as believed responsible for the incident and alleges it breached more than 140 organizations.

Vendors

Accenturethe organization. Two sources told Reuters they are PeopleSoft, Oracle's human resources software, and Accenture. Accenture told Reuters it was "proud to support the mission of the FBI" and did not answer the newsOracleThe FBI did not name the platform or the organization. Two sources told Reuters they are PeopleSoft, Oracle's human resources software, and Accenture. Accenture told Reuters it was "proud to support the mission of the

Products

PeopleSoftThe FBI did not name the platform or the organization. Two sources told Reuters they are PeopleSoft, Oracle's human resources software, and Accenture. Accenture told Reuters it was "proud to support the mission of the

Countries

CanadaJordanKhader, the suspect detained in Jordan, is cooperating with the FBI, according to Reuters, which cited people familiar with the matter.NetherlandsThe man arrested in the Netherlands was taken into custody a week before ShinyHunters announced the FBI breach on September 22. The Dutch police statement, published in Dutch, does not mention the FBI or its jobs portal.United States

Industries

Government

Related Articles