← Back to live feed

Saturday, Sep 26, 2026

1
FBI Confirms Personnel SSN Theft in First Breach Admission↩︎
topics 🔒 Cybersecurity tags TechCybersecurity keywords FBIShinyHuntersReuters

The Federal Bureau of Investigation notified its employees of a critical security failure after an intrusion into its recruitment site leaked sensitive records of the workforce. An internal agency memo declared a "cyber security incident" concerning the FBIjobs portal, confirming that the exposed data includes social security numbers, residential addresses, and official job titles for FBI personnel.

The hacking group ShinyHunters claimed responsibility for the breach, asserting it stole between 2 to 3 TB of data on almost all FBI agents and job applicants using an Oracle PeopleSoft zero-day vulnerability with a CVSS score of 9.8. Reuters reviewed documents showing the theft includes psychiatric and medical evaluations from the Medlink system. The group described the attack as a retaliatory "marketing initiative" following a 2026 Q2 FLASH report by the FBI that contained allegations regarding the group's tactics.

Image via @vxdb on X
Continues from Thursday, Sep 24
ShinyHunters Steals 3 TB of Personnel Data in FBI Network Breach
49 tweets • 26 sources
See all 49 tweets →