Cybercriminal group ShinyHunters claims it breached the FBI and stole sensitive information belonging to thousands of agents, their family members and people who applied for jobs at the agency. The FBI had not confirmed the breach or publicly commented on the hackers’ claims at the time of reporting.
ShinyHunters posted the claim on its dark web leak site, saying it obtained data on “almost all FBI agents” and job applicants. 404 Media reported receiving a sample containing 5,000 alleged agents and verified a portion of the names, home addresses, phone numbers and information about spouses against public records.
Hackers Say They Accessed HR and Government Cloud Systems
According to 404 Media, the hackers said they first compromised an Oracle PeopleSoft server used for human resources and recruitment. They then claimed to have accessed an Amazon-hosted government cloud environment containing information on FBI agents and applicants.
ShinyHunters said it obtained terabytes of data but did not explain what it planned to do with the information. The group said the attack was not financially motivated and demanded that the FBI remove a May 2026 Internet Crime Complaint Center warning about ShinyHunters, which the hackers allege contains false claims about their activities.
That FBI advisory describes ShinyHunters as a cybercriminal group associated with large data breaches, extortion and harassment. It also warns that threat actors may exaggerate or falsely describe the information they have stolen to pressure victims.
The hackers also reportedly defaced the FBI’s recruitment website. The main application portal and special agent application system displayed maintenance notices around the time the incident was reported.
Claim Follows Other Security Incidents Involving the FBI
The data described by the hackers could expose agents and their families to targeted phishing, harassment or extortion if the claims are accurate. Reporting on the incident also raised concerns that detailed personal information could be used to identify or pressure law enforcement personnel.
The alleged breach follows another reported compromise of an FBI system earlier in 2026. Unidentified hackers reportedly accessed infrastructure used to manage real-time wiretaps and foreign intelligence surveillance warrants, potentially exposing information about surveillance targets.
Separately, an Iran-linked group called Handala claimed in March that it had compromised FBI Director Kash Patel’s personal email account and published material from it. That incident involved Patel’s personal account rather than an FBI system.
Neither the FBI nor ShinyHunters responded to requests for comment cited in the initial reporting. No public FBI statement had confirmed the scope of the newly claimed breach at the time those reports were published.
Featured image credits: Magnific.com
For more stories like it, click the +Follow button at the top of this page to follow us.