ShinyHunters claims to have stolen FBI employee data

The cybercriminal group ShinyHunters claims to have breached FBI systems, allegedly stealing personal information belonging to employees and job applicants. The group reportedly defaced the FBI Jobs website and provided a sample of stolen data—including names, addresses, and phone numbers—to media outlets to substantiate their claims. ShinyHunters asserts that the attack was a retaliatory move against a May FBI advisory that labeled the group as extortionists. The hackers claim to have exploited a zero-day vulnerability in Oracle PeopleSoft software to infiltrate servers hosted on AWS GovCloud, exfiltrating several terabytes of data. While the FBI has confirmed it is investigating unauthorized activity on its recruitment portal, cybersecurity experts remain cautious, noting that the group has not provided sufficient technical evidence to verify the specific exploit used. The incident highlights ongoing tensions between federal law enforcement and sophisticated threat actors.