'We Hacked the FBI:' Hackers Say They Have Data on All FBI Employees
3 hours ago
- ShinyHunters claims to have breached FBI-related services and stolen personal data of all FBI employees and applicants, including names, addresses, phone numbers, and spouse details.
- The breach poses significant national security and counterintelligence risks, as the data could be used to track, intimidate, or harass agents, or aid foreign intelligence agencies.
- The group provided a sample of 5,000 records, verified through open-source tools, and defaced the FBI jobs website with a fake seizure notice mocking typical FBI takedown notices.
- The attack exploited a zero-day vulnerability in Oracle PeopleSoft to access AWS GovCloud servers, exfiltrating 2-3 terabytes of data.
- ShinyHunters stated the hack is not financially motivated but intends to use coercion rather than extortion.