Dutch National Police arrest member of group that claimed to have hacked FBI

On Tuesday, the Dutch National Police, in collaboration with the FBI, apprehended an alleged leader from the cyber group known as ShinyHunters, according to a joint statement. This arrest came a week after ShinyHunters took credit for compromising the FBI's jobs website and asserted they had obtained personnel and applicant data.

FBI Director Patel did not disclose the individual's identity but emphasized the person's significance as a key figure within the organization. Patel also mentioned that the FBI is actively pursuing additional leads in the ongoing investigation following this arrest.

The FBI announced its commitment to investigating the cyber incident affecting FBIJobs.gov, maintaining regular communication with all potentially impacted parties. They further affirmed that the investigation remains ongoing. Earlier this week, ShinyHunters had claimed the theft of between two to three terabytes of data linked to FBI and Justice Department personnel.

They exploited a newly discovered vulnerability in Oracle PeopleSoft, a human resources management software, to carry out their attack. In one of their communications, the group addressed Patel and Brett Leatherman, the FBI Cyber Division Assistant Director, stating they had infiltrated the FBI. They further claimed possession of sensitive information regarding numerous FBI agents and individuals who applied for FBI positions, including details from various services such as criminal justice, human resources, and Medlink systems.

On Monday, the New York Times reported that FBI employees had received an internal email acknowledging the hack as a cybersecurity incident and confirming the theft of some employees' personal information. However, CBS News has not independently verified the accuracy of the memo's contents.