Technology briefing

FBI investigates ShinyHunters claim of massive jobs-portal breach

The FBI is aggressively investigating claims by the ShinyHunters cybercrime group that it compromised FBIJobs.gov and stole 2–3 terabytes of data on agents, employees, and applicants. The bureau has not confirmed the breach occurred as described and says it is still undetermined whether a third-party provider or FBI systems were the entry point. The jobs portal remains offline while outlets report that sample records appear to match real personnel.

By US Brief desk · Updated 2026-09-24T05:35:00-07:00

File photo of the FBI Headquarters building in Washington, D.C.

Editor’s note: Breach claims and FBI statements follow CBS News and NBC News reporting from Sep 23, 2026. Sample-record corroboration language follows Reuters and CBS summaries; US Brief does not independently verify stolen files. Treat volume claims (2–3 TB) and “nearly all agents” language as the group’s unverified assertions until the FBI confirms scope.

The FBI said Wednesday it is “actively and aggressively investigating” claims by the ShinyHunters cybercrime group that the group compromised the FBIJobs.gov recruiting portal and stole a large trove of personnel and applicant data.

In a statement carried by CBS News and NBC News, the bureau said it is aware of a cyber-criminal enterprise “claiming a compromise of the FBIJobs.gov portal and alleged impact to FBI employee personally identifiable information (PII).” Officials stressed that “the point of breach is still undetermined—whether a third party or the FBI’s enterprise”—and that they are working with third-party providers that support the jobs site “to mitigate any and all risk.”

ShinyHunters has told multiple outlets it stole roughly 2 to 3 terabytes of data and claimed access spanning criminal-justice, human-resources, and Medlink-related systems, plus records on nearly all agents and people who applied for FBI jobs. CBS reported the group said it used a new Oracle PeopleSoft vulnerability—an approach Google previously documented against other PeopleSoft targets earlier in 2026. The FBI has not independently confirmed those volume or system claims.

The group framed the operation as retaliation for FBI advisories issued in May 2026. Those FLASH and IC3 notices warned organizations about ShinyHunters-linked credential theft, vendor abuse, exaggerated access claims, harassment, and swatting. In posts addressed to FBI leadership, ShinyHunters demanded that unflattering characterizations be corrected or removed within about a week or it would publish data.

Reporters who reviewed samples say portions appear to match real FBI or Justice Department personnel. NBC News said a former agent authenticated a sample that included sensitive personal information. Reuters reported that some alleged records listed granular intelligence assignments, including China-, Russia-, and Iran-focused roles and technical-surveillance work. CBS cautioned that correspondence of samples to real people does not by itself prove the files came from FBI systems.

Operational fallout is already visible. FBIJobs.gov and the Special Agent Applicant Portal showed “System Unavailable” messaging, and NBC reported the portal inaccessible. Ars Technica and Recorded Future News described earlier defacement of the jobs site with ShinyHunters branding. Bloomberg-sourced accounts cited by Ars said personnel received warnings to take protective steps while the investigation continues.

Security veterans are treating the episode as a high-stakes supply-chain and PII risk even before full confirmation. Former FBI deputy cyber director Cynthia Kaiser told NBC that home addresses, spouse names, and similar details could help criminals target agents and families, while warning that extortion groups often mix real access with exaggeration.

US Brief’s takeaway: Wednesday’s story is an active federal cyber probe, not a closed confirmation of a total FBI enterprise compromise. Watch for an official scope finding, whether Oracle or another vendor is named as the entry point, and whether any data dump appears when the group’s one-week deadline lands.

Method note: US Brief digests are AI-assisted from the US Brief desk. We synthesize reputable reporting; we do not fabricate quotes, documents, or casualty counts. When a source is thin, the article stays explainer-shaped rather than pretending to be an exclusive investigation.

Reader note: this detail page is paired one-to-one with briefing bullet “tech-fbi-shinyhunters”. The subject-brief thumbnail and More link both route here. Return via the back link to /brief/technology for the rest of today’s items, or email contact@us-brief.com with corrections.

Follow US Brief: Bluesky · X · RSS

Full interactive version requires JavaScript. https://us-brief.com/article/tech-fbi-shinyhunters

National & world Daily briefing

Know what happened.
Know why it matters.

Get clear, sourced briefings on US news, politics, technology, world affairs, finance, and entertainment. Catch up in minutes—no clickbait, no wasted time.

Back to Technology briefing Technology

FBI investigates ShinyHunters claim of massive jobs-portal breach

The FBI is aggressively investigating claims by the ShinyHunters cybercrime group that it compromised FBIJobs.gov and stole 2–3 terabytes of data on agents, employees, and applicants. The bureau has not confirmed the breach occurred as described and says it is still undetermined whether a third-party provider or FBI systems were the entry point. The jobs portal remains offline while outlets report that sample records appear to match real personnel.

By US Brief desk · Updated 2026-09-24T05:35:00-07:00

AI-assisted digests from the US Brief desk. Synthesizes reputable reporting with cited sources; not a wire service. Corrections welcomed.

File photo of the FBI Headquarters building in Washington, D.C.

The FBI said Wednesday it is “actively and aggressively investigating” claims by the ShinyHunters cybercrime group that the group compromised the FBIJobs.gov recruiting portal and stole a large trove of personnel and applicant data.

In a statement carried by CBS News and NBC News, the bureau said it is aware of a cyber-criminal enterprise “claiming a compromise of the FBIJobs.gov portal and alleged impact to FBI employee personally identifiable information (PII).” Officials stressed that “the point of breach is still undetermined—whether a third party or the FBI’s enterprise”—and that they are working with third-party providers that support the jobs site “to mitigate any and all risk.”

Like US Brief? You can support it with a tip.