FBI Tells Its Employees to Assume Hackers Have Their Personal Data

Summary

The FBI has told employees to assume their personal data was stolen after a claimed breach of FBIjobs.gov. ShinyHunters says it accessed 2–3 terabytes of records, potentially covering almost all FBI agents and anyone who applied for an FBI job, including names, phone numbers, home addresses, and sometimes spouse details. The group claims it used a previously unknown flaw in Oracle PeopleSoft, though the FBI has not confirmed the method. In response, the FBI warned staff to expect briefings and to watch for suspicious texts or calls. The hackers also cited an FBI advisory describing their use of harassment and swatting. The FBI publicly warned the group it could be found, while ShinyHunters later said the threat was a marketing stunt and it would not publish the data.