Hackers Claim Theft of Sensitive Data on 38,000 FBI Personnel

WASHINGTON (Terror Monitor) — The U.S. Federal Bureau of Investigation is investigating claims by the cybercrime group ShinyHunters that it breached systems linked to the bureau and stole sensitive information involving approximately 38,000 FBI employees and job applicants.

ShinyHunters claims it obtained names, job titles, badge numbers, home addresses, telephone numbers and information about employees’ spouses, along with other personal and professional records. The FBI itself says it employs approximately 38,000 people.

In a statement posted on X, the FBI said it was aware of the allegations and was “aggressively investigating” the matter. The bureau has not confirmed that the hackers obtained the full amount of data claimed by the group.

The alleged breach was reportedly disclosed by ShinyHunters on Monday night, when the group contacted journalists and shared screenshots and samples of what it said was stolen information. CBS News reported that the group claimed to have stolen between two and three terabytes of data related to FBI and Department of Justice personnel, and said it had exploited a vulnerability involving Oracle PeopleSoft, a human-resources management system.

Reuters reported that some of the allegedly leaked records appear to contain information concerning FBI personnel assignments and duties, including work related to Chinese espionage networks, Russian intelligence activities and investigations into drug-trafficking organizations. The presence of such information, if confirmed, could raise significant security concerns because it could expose personnel connected to sensitive investigations.

The BBC said it had reviewed a limited portion of the alleged data and that some of it appeared genuine, although the full dataset and the hackers’ claims had not been independently verified.

FBI Investigating Scope of Alleged Breach

The FBI has not confirmed that all of its employees’ information was compromised. Cybersecurity specialists have also cautioned that the existence of genuine-looking samples would not by itself establish that the hackers obtained the entire database they claim to possess.

The bureau is reportedly examining the allegations and working with a third-party provider supporting its recruitment systems. The investigation is expected to determine whether FBI systems were directly compromised and, if so, what information may have been accessed or exfiltrated.

The FBI’s workforce includes special agents as well as intelligence analysts, scientists, language specialists and information-technology personnel. The agency operates from its headquarters in Washington, D.C., with 56 field offices and hundreds of smaller offices across the United States.

Who Are ShinyHunters?

ShinyHunters is a cybercrime group associated with large-scale data theft and extortion operations. Reuters reported this week that the group has also been involved in a public dispute with another cybercrime group, Cl0p, after claiming to have taken control of its dark-web site.

The group has previously targeted organizations across multiple sectors, using stolen data as leverage for extortion. Its latest alleged targeting of the FBI has attracted particular attention because of the potential sensitivity of personnel information.

The FBI has not said how much data, if any, was actually stolen. Until the investigation is completed, the claim that information belonging to approximately 38,000 people was compromised remains unverified.