Hackers claim they took data on all FBI employees; FBI has not confirmed
ShinyHunters claims it stole FBI employee and applicant data via an Oracle flaw; a sample checks out partially, scale unconfirmed.
Original event 2026-09-22
This is an archived article. Forecasts, prices and upcoming events refer to its original time period.
The hacking group ShinyHunters claims it breached FBI-related systems and stole data on "all FBI employees and applicants." The FBI has not responded to a request for comment.
The group gave 404 Media a sample covering about 5,000 FBI employees, including addresses, phone numbers, dates of birth and, in some cases, spouse details. 404 Media ran some sample phone numbers through OSINT Industries and the names did correspond. The hackers say they used a zero-day in Oracle PeopleSoft, then reached AWS GovCloud servers and exfiltrated roughly two to three terabytes; they also defaced the FBI jobs site on Tuesday, which currently shows the applicant portal as unavailable.
The boundary: the core facts so far are the hackers' own claims, the sample was only checked for name-phone correspondence, and the "all employees" scale is unconfirmed by the FBI. The group says the motive is not financial; watch what it does next.