The digital extortion group ShinyHunters claims to have stolen data on thousands of FBI employees, though the bureau has not confirmed the breach.
Key facts
- •ShinyHunters claims to have stolen data on almost all FBI agents and job applicants.
- •The FBI's job site and applicant portal were reported as unavailable on Tuesday.
- •Reuters found nine matches when comparing the sample data against existing credit bureau records.
- •The hackers stated the attack was a response to a May 2026 FBI advisory regarding their methods.
- •ShinyHunters was previously linked to a May 2026 cyberattack affecting the education platform Canvas.
The hacking group known as ShinyHunters claims to have breached the Federal Bureau of Investigation and stolen data belonging to thousands of current and former employees. The group stated it targeted the bureau in retaliation for a May 2026 FBI announcement that detailed the hackers' methods and advised victims against paying ransoms. The FBI did not respond to requests for comment on Tuesday.
Evidence and System Status
To support its claims, ShinyHunters provided a screenshot of a vandalized FBI job site and a sample of the alleged stolen data. On Tuesday, the FBI job site and the "Special Agent Applicant Portal" displayed messages stating they were currently unavailable. While the authenticity of the screenshot remains unverified, the job site appeared to have experienced recent technical disruptions.
Verification Efforts
Reuters attempted to verify the stolen data by cross-referencing names, postal addresses, and Social Security numbers against credit bureau records and information held by the dark-web intelligence firm District 4 Labs. Matches were found in at least nine cases. However, investigators could not confirm the source of this data or definitively prove it was stolen from internal FBI systems as the hackers alleged.
Background on ShinyHunters
ShinyHunters is a well-known hacking crew linked to several high-profile incidents, including the theft of records from Rockstar Games and a May intrusion involving the education tool Canvas. Recently, the group has been involved in public disputes with other cybercrime organizations, including a reported conflict with the group known as cl0p.
Advertisement
This article was independently rewritten by ManyPress editorial AI from reporting originally published by CBC World, Channel NewsAsia, Daily Maverick.
