ShinyHunters claims FBI hack

Hacking group ShinyHunters has allegedly stolen extensive sensitive information from the US Federal Bureau of Investigation including details about employees and job applicants.

How the hackers got in

ShinyHunters used a zero day exploit in the PeopleSoft program from Oracle to obtain access to Amazon Web Services' GovCloud servers, according to 404 Media.

What data was stolen

The sample shared with media contained names, addresses, telephone numbers, dates of birth, social security numbers and emergency contact details for five thousand FBI employees.

Scale of the breach

ShinyHunters claims to have two to three terabytes of data. The group may also have gathered details about work assignments for agents and FBI units working on intelligence, security and counter-espionage efforts.

“We hacked the FBI. We hold data on all FBI employees and applicants.”

Not about money this time

ShinyHunters told four zero four Media the attack was not financially motivated but aimed at coercing the FBI to remove or amend a previous statement about the group exaggerating claims of access.

“not financially motivated”

FBI confirms investigation

The FBI said it is aware of the alleged compromise of the FBIJobs.gov portal and is actively and aggressively investigating the matter involving employee personally identifiable information.