Hacking group ShinyHunters claims breach of FBI, theft of agents' and applicants' data
Cybercriminal group ShinyHunters says it breached FBI systems and stole personal data on thousands of agents and job applicants. The FBI has not officially responded to the claims.
ShinyHunters, a hacking group known for large-scale data theft and extortion schemes, has claimed on its dark web leak site that it breached the FBI and stole sensitive data on nearly all FBI agents, as well as individuals who had applied for jobs with the bureau.
The independent outlet 404 Media first reported the breach after obtaining a sample of the stolen data, which included names, home addresses, and phone numbers of FBI agents and their spouses. A portion of the sample was verified against public records.
According to 404 Media's reporting, the hackers initially compromised an Oracle PeopleSoft server, a system commonly used by HR departments and recruiters to store job applicants' personal information. From there, they pivoted into an Amazon-hosted government cloud storage system containing broader data on agents and applicants. ShinyHunters told the outlet it extracted terabytes of data but did not specify what it intends to do with the information.
The group claims the hack was "not financially motivated," instead demanding that the FBI take down a report it says contains false allegations against the group.
Security observers note the stolen data could pose a serious counterintelligence risk, potentially allowing foreign spies to use the information to coerce or blackmail FBI agents and their families into cooperation.
The hackers also reportedly defaced the FBI's careers website, which at the time of reporting displayed a maintenance notice. The bureau's special agent applicant portal was also reported down. The FBI has not responded to requests for comment.
This marks the second known breach of an FBI system this year. Earlier in 2026, unidentified hackers broke into a system used to manage real-time wiretaps and foreign intelligence warrants. Separately, FBI Director Kash Patel had his personal email account hacked and leaked by an Iran-linked hacking group called Handala, in what was described as retaliation for U.S.-led strikes on Iran.
