‘We Hacked the FBI:’ Hackers Say They Have Data on All FBI Employees
Key Points:
- The hacking group ShinyHunters claims to have breached multiple FBI-related services, stealing personal data on all FBI employees and applicants, including names, home addresses, phone numbers, and spouse information.
- The group reportedly exploited a zero-day vulnerability in Oracle's PeopleSoft to access AWS GovCloud servers, exfiltrating between two and three terabytes of sensitive data.
- ShinyHunters defaced the FBI jobs website, which remains offline, and stated the breach includes personally identifiable and protected health information on current and former FBI personnel.
- While ShinyHunters typically extorts victims for ransom, they claim this breach is not financially motivated and may involve coercion rather than extortion.
- The FBI is investigating the unauthorized activity, and ShinyHunters has challenged the FBI to retract previous allegations against the group within one week.