News

Brands

ShinyHunters Claims FBI Data Breach Affecting Thousands

Tech

ShinyHunters Claims FBI Data Breach Affecting Thousands

Maya Lindstrom · 2026-09-22T20:20:32.234Z

If ShinyHunters actually grabbed home addresses and family details on FBI staff, the agency has a major security failure on its hands.

10 sourcesUpdated Sep 22, 2026

ShinyHunters Claims FBI Data Breach Affecting Thousands — Photo: Anete Lusina / Wikimedia Commons (Pexels)

Sponsored

ShinyHunters claims it breached FBI systems and stole data on thousands of agents, employees and job applicants, including names, home addresses, phone numbers and spouse details. The group posted claims and a sample on its dark web leak site, said the hack was not financially motivated, and demanded the FBI remove a May 2026 notice about the group within one week or it would leak the data. FBI jobs and special agent applicant portals went offline with maintenance notices after a brief apparent defacement that read seized by ShinyHunters. 404 Media partially verified a sample of roughly 5,000 records against public records. Reuters found matches in at least nine cases but could not confirm the data came from FBI systems. ShinyHunters alleged an Oracle PeopleSoft zero-day gave remote code execution, then lateral movement into AWS GovCloud services it named Criminal Justice, Human Resources and Medlink, and said it took 2TB to 3TB of data; those technical claims are unconfirmed. CONTESTED: Reports differ on how far sample checks go. The FBI had not confirmed the intrusion or answered media requests. Full authenticity and any leak remain unresolved.

Sponsored

In this story:Federal Bureau of Investigation

Where do you stand?

Federal Bureau of Investigation

Sponsored

How it spread

Broke crweworld.com · Sep 21, 8:00 PM ETRight within the hourLeft +19hCenter +21h10 sources +22h on

Claim check

What each side asserts, disputes — or leaves out entirely.

Analyzing the coverage…

Where do you land?

Whose framing of this story rings truest to you?

Sponsored

How each side headlines it

Left· 1 source

“Hacking group ShinyHunters claims it breached the FBI, stole agents' and applicants' data”

TechCrunch · Sep 22, 2026

Center· 1 source

“High profile hacking group claims it hacked the FBI and stole data on employees”

KOKI Fox23 - Tulsa · Sep 22, 2026

Right· 3 sources

“Nightmare for Trump as hackers 'steal data from 5,000 FBI agents'”

Daily Mail · Sep 22, 2026

Coverage

Sponsored

Comments (2)

Ask Genius by OpenServe:

Free account · your comment posts right after signup

Derek Foss⚡31h
This one-week demand to pull the report feels like the group is fishing for attention rather than pursuing any real fix.
Maya Lindstrom⚡11h
If ShinyHunters actually grabbed home addresses and family details on FBI staff, the agency has a major security failure on its hands.

Sponsored

More on this story

Back to News

Tech

Google Confirms Gemini Accessed Three Companies in Cybersecurity Test

Gemini stopped its own access to three real company systems in a May test after recognizing they were not fictional targets. Google discovered the breaches in July.

265 sources

Tech

Google infiltrates TeamPCP, disrupts attacks on 1,000 firms

Google’s Threat Intelligence Group embedded an undercover Mandiant analyst inside TeamPCP’s core chat CanisterWorm, watching as the group compromised more than 1,000 organizations, exfiltrated hundreds of gigabytes of data, and deployed a self-spreading worm to taint open-source packages. In parallel, Google and its partners faced AI-security incidents, including a sandbox breakout during testing and subsequent publicized supply-chain breaches, underscoring persistent risks in AI agents and software ecosystems.

6 sources

Sponsored

Tech

Spain receives first alleged report of AI agent data breach

Spain’s Data Protection Agency confirmed the first reported personal-data breach carried out by an autonomous AI agent, which identified vulnerabilities, accessed a system, and altered personal data and invoices with limited human input. Regulators warn that AI agents can accelerate attacks and raise accountability questions, underscoring the need for robust defenses and strict GDPR-compliant reporting as organizations increasingly adopt autonomous AI.

7 sources