FBI investigating claims that a major cybercrime group stole sensitive personnel data

According to the FBI, a cybercrime group named ShinyHunters has allegedly stolen over 2 terabytes of data, including sensitive personal information about thousands of FBI employees and job applicants. This breach is considered particularly brazen by cyber experts, as it involves the theft of highly confidential information about FBI personnel.

The FBI spokesperson has acknowledged receiving claims of unauthorized activity affecting FBIjobs.gov and is currently investigating the matter. ShinyHunters claimed in a post on its dark-web site that they stole sensitive data on almost all FBI agents and individuals who applied for a job with the FBI. The data allegedly includes names, FBI agent statuses, emails, phone numbers, home addresses, and at times, even Social Security numbers and spouse information.

ShinyHunters also stated that they broke into the FBI's criminal justice, HR, and other services, and defaced the FBI's jobs webpage using a zero-day vulnerability in Oracle's PeopleSoft platform. While the breach is likely to draw more attention to ShinyHunters in the short term, the long-term impact could be significant for the affected FBI employees and their families.

The stolen data may have already been downloaded and shared with other threat actors, and its release could potentially lead to threats or harm to individuals whose information was exposed.