conv.

All stories
SecurityActive · 11h

ShinyHunters claims FBI jobs-site hack; bureau investigates as portal goes dark

A cybercriminal group says it stole data on nearly all FBI agents and applicants; the FBI can't yet say if the breach started internally or with a vendor.

newest coverage 4h agosummary written 6h ago8 pieces NewswiresYouTubeGoogle News

What to know

  • ShinyHunters claims it holds sensitive data on nearly all FBI agents and job applicants obtained via FBIjobs.gov, a claim the FBI has not verified.
  • The bureau has not determined whether the intrusion originated in its own systems or through a third-party vendor supporting the recruitment site.
  • FBIjobs.gov has been taken offline while the FBI investigates with third-party providers.
  • ShinyHunters frames the alleged hack as retaliation for a May FBI advisory calling it an extortion group, and has given the bureau one week to retract it.

“compromised very sensitive data on almost ALL FBI Agents and individuals who filed an application with the FBI for a job.”

ShinyHunters, hacking group · Los Angeles Times ↗ · Sep 22

ShinyHunters Hacking group claiming the breachKash PatelKash Patel FBI DirectorBrett LeathermanBrett Leatherman FBI Assistant Director, Cyber DivisionFBI Federal agency, subject of the alleged breach

ShinyHunters claims FBI jobs-site hack; bureau investigates as portal goes dark
ms.now

How it unfolded 2 developments, newest first · click a bar or a number to jump articles

Peak 4 pieces in one quarter hour at Today, 11 AM; 8 pieces over 12 hours (7 articles · 1 video) Today, 11:13 AM — quietToday, 11:28 AM — quietToday, 11:43 AM — quietToday, 11:58 AM — 4 pieces · 4 articles — Newswires 4Today, 12:13 PM — quietToday, 12:28 PM — 1 piece · 1 article — Google News 1Today, 12:43 PM — quietToday, 12:58 PM — quietToday, 1:13 PM — quietToday, 1:28 PM — quietToday, 1:43 PM — quietToday, 1:58 PM — quietToday, 2:13 PM — quietToday, 2:28 PM — quietToday, 2:43 PM — quietToday, 2:58 PM — quietToday, 3:13 PM — quietToday, 3:28 PM — quietToday, 3:43 PM — 2 pieces · 2 articles — Newswires 2Today, 3:58 PM — quietToday, 4:13 PM — quietToday, 4:28 PM — quietToday, 4:43 PM — quietToday, 4:58 PM — quietToday, 5:13 PM — quietToday, 5:28 PM — quietToday, 5:43 PM — quietToday, 5:58 PM — quietToday, 6:13 PM — quietToday, 6:28 PM — 1 piece · 1 video — YouTube 1Today, 6:43 PM — quietToday, 6:58 PM — quietToday, 7:13 PM — quietToday, 7:28 PM — quietToday, 7:43 PM — quietToday, 7:58 PM — quietToday, 8:13 PM — quietToday, 8:28 PM — quietToday, 8:43 PM — quietToday, 8:58 PM — quietToday, 9:13 PM — quietToday, 9:28 PM — quietToday, 9:43 PM — quietToday, 9:58 PM — quietToday, 10:13 PM — quietToday, 10:28 PM — quietToday, 10:43 PM — quietToday, 10:58 PM — quiet 12
12 PM2 PM4 PM6 PM8 PMnow · 11:13 PM ET
  1. 2

    FBI says source of breach — internal or vendor — is unresolved

    The bureau said it has not yet determined whether the breach originated within its own systems or through a third-party provider supporting FBIjobs.gov, as it continues an 'actively and aggressively' investigation.

    “We have compromised the FBI…”
    — ShinyHunters, hacking group · source
  2. 1

    FBI confirms it is investigating the breach claims

    The FBI said it is aware of a cybercriminal group's claims of a compromise affecting FBIjobs.gov and employee personal data, and that it is working with third-party providers while it investigates; the claims have not been independently verified.

    “The FBI is aware of a cybercriminal enterprise group claiming a compromise of the fbijobs.gov portal and alleged impact to FBI employee personally identifiable information…”
    — FBI
    1. 2 outlets FBI probes jobs portal breach amid claims employee data was compromised

      first by MS NOW, 7h ago · also Cybersecurity Dive

      1 more headline
    2. 1 outlet FBI Investigates Apparent Breach of Its Jobs Website

      first by NewsMax.com, 11h ago

      1 more headline
  3. background

    ShinyHunters demands FBI retract May cyber advisory — The group said it was 'offended' by an FBI public service announcement describing it as a cybercriminal extortion group and gave the bureau one week to correct or remove the report, denying the hack was financially motivated.

  4. background

    FBIjobs.gov recruitment site goes offline — The bureau's main recruitment portal, which handles applicant personal information, was inaccessible Wednesday morning following the hacking claims.

  5. background

    ShinyHunters posts claim of FBI breach on X — The group addressed a message to FBI Director Kash Patel and Cyber Division assistant director Brett Leatherman, claiming to hold sensitive data on almost all FBI agents and job applicants and alleging compromise of criminal justice, HR and medical systems.

Also covered reported alongside — the timeline has no entry for these yet

  1. 2 outlets FBI Probes Hackers' Claim of Stealing Employee Data, Compromising Jobs Website

    first by Associated Press, 11h ago · also Los Angeles Times

    1 more headline