Thousands of private documents belonging to federal law enforcement officers and their families were compromised in a large-scale cybersecurity incident, according to claims by a cybercrime syndicate. The group, known as ShinyHunters, asserts it exfiltrated up to 3TB of sensitive data from internal networks, including Human Resources files and the Medlink medical database. Stolen records allegedly contain home addresses, phone numbers, medical diagnoses, and prescription histories for nearly all agents and job applicants. The hackers reportedly used an Oracle PeopleSoft zero-day vulnerability to access the systems and temporarily defaced the agency's recruitment portal as proof of the intrusion.

The attack serves as retaliation for a Quarter 2 2026 FLASH report that ShinyHunters claims contained false allegations about its group activities. While the FBI has not confirmed the full extent of the breach, the bureau is investigating unauthorized activity affecting FBIjobs.gov and the potential exposure of personnel files. The incident may have also exposed the FBI's Remote Operations Unit, the agency's own hacking arm, and marks the most direct conflict to date between the group and the agents who investigate its extortion operations. ShinyHunters has given the agency 1 week to remove the report.