The hacking group ShinyHunters claims it breached multiple FBI-related services and stole data belonging to employees and applicants. The group also briefly defaced the FBI’s job recruitment website.
Hackers allegedly gained initial access by exploiting a previously unknown zero-day vulnerability in Oracle’s PeopleSoft software. The stolen data reportedly includes names, home addresses, phone numbers, and information on FBI agents' spouses.
ShinyHunters provided a data sample for 5,000 individuals to the media outlet 404 Media. The group is threatening to leak the full dataset unless the FBI removes a recent public service announcement regarding the group.
The FBI has not yet publicly confirmed the breach.