The cyber extortion group ShinyHunters claimed on Tuesday that it had breached the U.S. Federal Bureau of Investigation and stolen data belonging to current and former employees, as well as individuals who filed job applications with the agency. In a statement posted on the dark web, the group asserted it holds "very sensitive data on almost ALL FBI Agents and individuals who filed an application with the FBI for a job." As of the report date, the FBI has not officially confirmed or denied the claim, and no independent verification or proof-of-leak has been provided.

What should defenders do?

Organizations should treat unverified claims with caution. Verify incident reports through official channels. Maintain strict access controls and monitoring. Follow FBI or CISA advisories as they are released.

infoCyber Attacks

ShinyHunters Claims FBI Breach, Alleging Theft of Agent and Applicant Data

Unverified claim by ransomware group asserts compromise of FBI systems; agency has not confirmed incident

CyberIntel DeskPublished 2 days agoUpdated less than a minute ago1 min read

ShinyHunters Claims FBI Breach, Alleging Theft of Agent and Applicant Data

Key Takeaways

ShinyHunters claimed a breach of FBI systems, asserting theft of data on agents and job applicants.
The claim was posted on the dark web and reported by The Hacker News.
The FBI has not officially confirmed or denied the incident.
No independent verification or proof-of-leak has been provided.

Related Security News

highCyber Attacks

Former US Air Force Members Sentenced to Prison for Business Email Compromise Scams

Two former members of the United States Air Force were sentenced to a combined 189 months in federal prison for their roles in a multi-year series of business email compromise (BEC) scams and phishing campaigns. The sentencing, reported by BleepingComputer in September 2026, concluded a federal case targeting individuals who abused their military backgrounds to conduct financially motivated email fraud. The attacks spanned multiple years prior to sentencing, though specific victim counts and total financial losses were not detailed in the reporting. The case underscores the legal consequences of using military credentials and training for cyber-enabled fraud.

BleepingComputerabout 6 hours ago1 min read