![](\"https:\/\/media.thenextweb.com\/2026\/09\/fbi-seal-headquarters.avif\")
<\/p>\nDuring the past year, the cybercrime group ShinyHunters has been extorting companies and, last week, took over a rival gang\u2019s leak site. Now, it has gone after the agency that warned the public about it.<\/p>\n
The FBI stated on Tuesday that it is investigating a possible breach of its online jobs portal after the cybercrime group said it had stolen \u2018very sensitive\u2019<\/em> data on \u2018almost all\u2019<\/em> FBI agents and those who had app<\/a>lied for positions at the bureau.<\/p>\n \u201cThe FBI is aware of claims regarding unauthorized activity affecting FBIjobs.gov and is currently investigating,\u201d the <\/em>bureau said in a statement. <\/em><\/p>\n<\/blockquote>\n The breach was\u00a0first reported by\u00a0404 Media<\/em><\/a>, which received a sample covering 5,000 purported agents, including names, home addresses, phone numbers, and details of their spouses.<\/p>\n Two people with knowledge of the breach told Politico<\/em><\/a>\u00a0that investigators consider the claims credible and view the incident as a significant counterintelligence failure.<\/p>\n \u201cIt\u2019s really bad,\u201d one said.<\/em><\/p>\n<\/blockquote>\n It is still unclear how the group gained access. According to the same source, the attackers seem to have exploited a vulnerability in Oracle PeopleSoft, a human resources software platform.<\/p>\n ShinyHunters told 404 Media<\/a> that it had used a previously unknown flaw, but the source added that investigators have not verified this.<\/p>\n Politico noted that the group used a PeopleSoft zero-day against other organizations in June, a vulnerability that Oracle later patched, so it is possible that they reused that exploit on a system that had not been patched.<\/p>\n Unusually for a criminal group, ShinyHunters says it wants a correction rather than money.<\/p>\n In May, the FBI published an alert<\/a>\u00a0describing the group\u2019s methods, after an attack on the\u00a0Canvas learning platform\u00a0knocked thousands of schools and universities offline.<\/p>\n The hack, the group said, was meant to force the bureau to \u201ccorrect or simply remove\u201d<\/em> it.<\/p>\n Cynthia Kaiser, a former deputy assistant director of the FBI\u2019s Cyber Division, told\u00a0Politico<\/em>\u00a0the attack was<\/p>\n \u201c[\u2026]very atypical behavior for ransomware gangs, but goes to show you the unpredictability and immaturity of the group.\u201d<\/em><\/p>\n<\/blockquote>\n This is the second major breach of FBI systems this year, following a breach in which China-associated hackers gained access to a wiretapping system in April.<\/p>\n The group wished for the FBI to cease referring to it, and for the moment has given the bureau a great deal more to say.<\/p>\n<\/p><\/div>\n If you liked the article, do not forget to share it with your friends. Follow us on\u00a0Google News<\/a><\/span>\u00a0too, click on the star and choose us from your favorites.<\/span><\/strong><\/p><\/blockquote>\n If you want to read more like this article, you can visit our Technology category.<\/a><\/span><\/strong><\/p>\n<\/blockquote>\n\n
\n
\n
\n