Thousands of sensitive employee records including home addresses and assignments were allegedly exfiltrated from FBI systems by the ShinyHunters hacking group. The group claims to have stolen 2 TB to 3 TB of data from current and former agents, spouses, and job applicants by exploiting an unpatched Oracle PeopleSoft zero-day vulnerability. The FBI is investigating reports of unauthorized activity on its recruitment website, which was temporarily defaced during the incident.

ShinyHunters stated the attack was retaliation for a may FLASH report that contained false allegations about the group's operations. Stolen data reportedly includes home addresses, phone numbers, and medical records from the Medlink system, as well as details on the bureau's own hacking unit. The group gave FBI leadership one week to remove the government report or face additional leaks, while a sample of 5,000 records was shared with 404 Media to verify the claims.