Hacker group breaches FBI jobs site

ShinyHunters claimed to have stolen two to three terabytes of data from FBIJobs.gov after exploiting a previously unknown software bug. The group posted a seizure banner on the homepage on Tuesday.

“THIS SITE HAS BEEN SEIZED BY SHINYHUNTERS.”

Stolen data includes sensitive details

The breach exposed names, home addresses, phone numbers, spouses' names, and medical information for current and former agents and job applicants. Some data included work focus areas like counter-intelligence on China, Russia, and Iran.

Group demands FBI retract warning

ShinyHunters says it exploited the bug to force the FBI to remove or edit a May advisory that accused the group of making exaggerated claims and conducting swatting and sextortion attacks. The group gave the FBI one week to comply.

“We wish to state unequivocally our threats and claims are very real.”

Zero-day bug in Oracle software

ShinyHunters weaponized a previously undiscovered bug in Oracle PeopleSoft, human resources software used by many companies. The group said it plans to continue using the zero-day for its normal operations.

FBI launches investigation

The FBI has not confirmed the hack but is actively investigating. The jobs site remains inaccessible and the agency warned all personnel to protect themselves. The FBI said the breach point is still undetermined.

Data leak likely if deadline missed

ShinyHunters has not said what happens if the FBI misses the one-week deadline, but cybersecurity experts say the stolen data will likely be leaked online. The group denies the demand is financially motivated.