Archive · 23 Sep 2026
ShinyHunters Claims FBI Data Breach as Agency Investigates
A hacking group called ShinyHunters says it broke into systems connected to the FBI.
The group claims it stole information about many FBI agents and people who applied for jobs.
Some reported samples included private details such as addresses, phone numbers and Social Security numbers.
The FBI confirmed that its jobs website experienced unauthorized activity.
The agency has not confirmed that ShinyHunters stole all the information it claims to possess.
News organizations were able to check some details, but they could not prove where the data came from.
ShinyHunters says it wants the FBI to remove a report that it believes contains unfair or inaccurate claims.
If the information is genuine, it could be used to threaten or harass agents and their families.
ShinyHunters claims it breached the FBI and stole data on almost all agents and job applicants.
The FBI acknowledged unauthorized activity affecting FBIjobs.gov and said it is investigating.
Reported samples included names, addresses, phone numbers, Social Security numbers, assignments and family information.
Reuters partially matched some sample details, including records associated with FBI Director Kash Patel, but could not verify their source.
ShinyHunters says the attack was not financially motivated and wants the FBI to remove a report it considers inaccurate.
- Who
- The ShinyHunters cybercriminal group made the claim; the Federal Bureau of Investigation is investigating.
- What
- An alleged breach involving sensitive information about FBI agents and job applicants, alongside unauthorized activity on FBI employment websites.
- When
- The claim became public on September 22, 2026.
- Where
- The reported activity affected FBIjobs.gov and the Special Agent Applicant Portal; ShinyHunters also claimed access to an Oracle PeopleSoft server and an Amazon-hosted government cloud.
- Why
- ShinyHunters says it acted after an FBI announcement about the group and wants the agency to remove a report containing allegations it considers inaccurate.
ShinyHunters' Claims
FBI's Position
Extent of the alleged breach
ShinyHunters' Claims
ShinyHunters claims it accessed information on almost all FBI agents and job applicants and stole terabytes of data.
FBI's Position
The FBI acknowledged unauthorized activity on its jobs website but has not confirmed how much data was accessed or whether the broader claims are true.
Source of the data
ShinyHunters' Claims
ShinyHunters says the information came from FBI-related systems, including an Oracle PeopleSoft server and an Amazon-hosted government cloud.
FBI's Position
Reuters partially verified some sample details but could not establish where the data came from or whether it was stolen from FBI internal systems.
Motivation
ShinyHunters' Claims
ShinyHunters says the attack was not financially motivated and was intended to pressure the FBI to remove a report it considers inaccurate.
FBI's Position
The FBI has not publicly confirmed the group's motivation or commented on its demand.
- Claimed attacker
- ShinyHunters
- Affected agency
- Federal Bureau of Investigation
- Public disclosure
- September 22, 2026
- Reported data
- Names, home addresses, phone numbers, Social Security numbers, assignments and family information
- Reported sample
- ShinyHunters said it showed information on roughly 5,000 agents
- FBI position
- The FBI confirmed unauthorized activity affecting FBIjobs.gov but has not confirmed the alleged breach's scope or source
- Claimed demand
- Removal of an FBI report that ShinyHunters says contains inaccurate allegations
