FBI investigates hackers' claim to have stolen employee data, compromised jobs website

The FBI is currently investigating a suspected cyberattack on its job application website, FBIjobs.gov. ShinyHunters, a hacking group, claimed responsibility for the breach, stating they had obtained sensitive personal data on nearly all FBI agents and applicants. The stolen information reportedly included names, agent status, email addresses, phone numbers, home addresses, and in some cases, details about spouses such as Social Security numbers.

The FBI confirmed that they were investigating unauthorized activity affecting FBIjobs.gov, while the website's Special Agent applicant portal was offline on Tuesday. Cybersecurity experts believe the attack was likely genuine and could pose long-term risks to FBI employees and their families if the data is disseminated to other criminal groups or sold on the dark web.

Allan Liska, a threat intelligence analyst at Recorded Future, noted that the stolen data is likely to be repeatedly downloaded and shared among threat actors. Andrew Brandt, principal threat intelligence incident commander at Huntress, expressed concern over the possibility of ShinyHunters selling the information to criminal or state-sponsored hackers.

ShinyHunters claimed the attack was not financially motivated but instead demanded the FBI retract or revise statements about its activities. The group also threatened to expose sensitive information about FBI agents and their families. The FBI has not yet confirmed the identity of the attackers or the extent of the data compromise.

This incident highlights the increasing frequency of cyberattacks targeting US law enforcement agencies. The FBI has previously investigated breaches involving sensitive networks used for wiretaps and intelligence surveillance warrants, as well as the Bureau of Alcohol, Tobacco, Firearms and Explosives.