decrypt.coarticleFBI Tells Its Employees to Assume Hackers Have Their Personal Data
Decrypt reports that ShinyHunters claims to have breached the FBI's job-application site FBIjobs.gov, allegedly via an unconfirmed Oracle PeopleSoft zero-day, exfiltrating 2-3TB of personal data on nearly all FBI agents, job applicants, and some spouses. An internal FBI memo told staff to assume their data is compromised and to expect virtual briefings and suspicious contact attempts; FBI Cyber Division chief Brett Leatherman publicly responded citing a related Dutch arrest, after which ShinyHunters called its one-week retraction ultimatum a "marketing campaign" and said it won't publish the data.
TL;DR ShinyHunters claims a PeopleSoft zero-day breach of FBIjobs.gov exposing FBI staff/applicant data; the FBI told employees to assume their info is already stolen.
Organisations named here
- Brett Leatherman
Technologies named here
- FBIjobs.gov
- Oracle PeopleSoft
- Salesforce
- Coinbase
- Waltio
Techniques named here
- Zero-day exploitation
- Data breach / mass data exfiltration
- Doxxing
- Swatting
- Harassment/threats against family members
- Extortion
- Insider bribery for data access
- Physical/violent attack enabled by leaked data
Threat actors named here
- ShinyHunters
- BreachForums
Related in Threat Intel
huntress.comwriteupReverse Engineering the Six Stages of MacSync Stealer and RAT
huntress.comwriteupAI-Coded Malware | Analyzing Vibe-Coded AD Enumeration | Huntress
blog.talosintelligence.comtoolIntroducing CAIRN: Frontier tracking for AI-integrated malware (Cisco Talos)
huntress.comwriteup