Trove of Stolen Sensitive FBI Employee Data Is Significant Intelligence Risk
ShinyHunters has previously extorted companies and schools, but the sensitivity of this data makes this breach different.
Hackers from the group ShinyHunters have claimed to have stolen personal data of all FBI employees and applicants, according to a report by 404 Media. The group allegedly exploited an Oracle PeopleSoft vulnerability to gain access to the FBI's recruitment site. FBI spokespersons stated that the bureau is actively investigating the matter and working with third-party providers to mitigate any risk.
The FBIJobs.gov portal and Special Agent Application Portal are currently unavailable due to the attack. ShinyHunters, known for various ransomware attacks, claims the data theft is not financially motivated but instead aims to correct false allegations in an FBI PSA. However, the stolen data poses significant national security and counterintelligence risks, as it could compromise FBI agents' ability to go undercover and travel abroad.
Security analysts emphasize the severity of this breach, warning that it could destroy FBI employees' capacity to conduct sensitive operations. The FBI has faced multiple cyberattacks this year, including surveillance system vulnerabilities and claims of an Iran-backed group's email breach of FBI Director Kash Patel.
Written by urgent.news from CNET's reporting — not their text. Machine-written — may contain errors; check the original before relying on it.
