# FBI investigates massive hack of employee data

> ShinyHunters claims to have stolen personal information on thousands of FBI staff and applicants from a jobs website.
- Title: FBI investigates massive hack of employee data · Ars Technica
- Summary: ShinyHunters claims to have stolen personal information on thousands of FBI staff and applicants from a jobs website. A hacker group exploited a previously…
- Keywords: fbi, shinyhunters, fbijobs.gov, data breach, zero-day exploit, oracle peoplesoft, cyber attack, employee data, hacker group, extortion threat, technology, science
- Source: Ars Technica — https://arstechnica.com/tech-policy/2026/09/fbi-rushes-to-investigate-if-shinyhunters-hack-of-thousands-of-employees-is-real
- Published: 2026-09-23T21:46:36+00:00
- Read time: 1 min
- Topics: fbi, shinyhunters, fbijobs.gov, data breach, zero-day exploit, oracle peoplesoft, cyber attack, employee data, hacker group, extortion threat, technology, science
## Hacker group breaches FBI jobs site
ShinyHunters claimed to have stolen two to three terabytes of data from FBIJobs.gov after exploiting a previously unknown software bug. The group posted a seizure banner on the homepage on Tuesday.

> THIS SITE HAS BEEN SEIZED BY SHINYHUNTERS.
## Stolen data includes sensitive details
The breach exposed names, home addresses, phone numbers, spouses' names, and medical information for current and former agents and job applicants. Some data included work focus areas like counter-intelligence on China, Russia, and Iran.
## Group demands FBI retract warning
ShinyHunters says it exploited the bug to force the FBI to remove or edit a May advisory that accused the group of making exaggerated claims and conducting swatting and sextortion attacks. The group gave the FBI one week to comply.

> We wish to state unequivocally our threats and claims are very real.
## Zero-day bug in Oracle software
ShinyHunters weaponized a previously undiscovered bug in Oracle PeopleSoft, human resources software used by many companies. The group said it plans to continue using the zero-day for its normal operations.
## FBI launches investigation
The FBI has not confirmed the hack but is actively investigating. The jobs site remains inaccessible and the agency warned all personnel to protect themselves. The FBI said the breach point is still undetermined.
## Data leak likely if deadline missed
ShinyHunters has not said what happens if the FBI misses the one-week deadline, but cybersecurity experts say the stolen data will likely be leaked online. The group denies the demand is financially motivated.
## Key takeaway

A hacker group exploited a previously unknown software bug to access sensitive FBI employee data and is demanding the agency retract a warning about them.