Hackers Claim Massive Data Breach of FBI Employees

The hacking group ShinyHunters claims to have breached multiple FBI-related systems, including the FBI jobs and Special Agent Applicant infrastructure, and stolen data covering all FBI employees and applicants. The group alleges it exploited a zero-day vulnerability in Oracle PeopleSoft, then gained access to AWS GovCloud servers and exfiltrated approximately 2-3 TB of data. They provided a sample containing alleged personal information on 5,000 FBI employees, including names, home addresses, phone numbers, dates of birth, and in some cases, information about spouses. The group also defaced the FBI jobs website, claiming that PII and PHI belonging to current and former employees as well as applicant information had been compromised. The FBI is currently investigating the claims.