FBI Reportedly Declares ‘Cyber Security Incident’ After Hackers Steal Agents’ Personal Data

The FBI has reportedly declared a “cyber security incident” after hackers stole personal information belonging to FBI employees and applicants through a compromise involving the bureau’s job application portal.

According to an internal notification sent to FBI staff, the incident exposed personally identifiable information including employees’ names, addresses, job titles and Social Security numbers. The FBI has not publicly confirmed the full extent of the breach, but the latest notification represents a significant acknowledgement that employee information was affected.

The incident centers on FBIJobs.gov, the bureau’s online portal for prospective employees. The hacking group ShinyHunters claimed responsibility and said it had obtained a much larger collection of information from the system. The group has claimed access to data involving a large portion of the FBI workforce and people who had applied for jobs with the bureau.

The FBI initially said on September 23 that it was aware of the claims but that the “point of breach” remained undetermined. Investigators were examining whether the compromise occurred through a third-party provider supporting FBIJobs.gov or through the bureau’s own enterprise systems.

Reuters reported that data allegedly obtained by ShinyHunters included detailed information about some FBI employees’ assignments, including personnel connected to intelligence, counterespionage and investigations involving China, Russia and drug cartels. The reported dataset also contained personal information such as phone numbers, dates of birth, emergency contacts and Social Security numbers.

TechCrunch reported that the hackers allegedly exploited a vulnerability involving an Oracle PeopleSoft server used to host human-resources information. The group has said it is not seeking a financial ransom, instead demanding that the FBI correct or remove an earlier advisory describing ShinyHunters as a cybercriminal group involved in large-scale data breaches and extortion.

The potential exposure of FBI personnel data has raised concerns about risks beyond ordinary identity theft. Security experts have warned that personal information about agents could potentially be used for phishing, harassment, profiling or intelligence-gathering efforts.

The FBI has continued investigating the incident and working with third-party providers connected to the jobs portal. The bureau has also taken steps to notify affected personnel while determining the scope and source of the compromise.

The investigation remains ongoing, and the FBI has not publicly confirmed the hackers’ broader claims about the volume of data allegedly stolen. The incident nevertheless highlights the security challenges government agencies face when sensitive employee information is stored and processed through large third-party technology systems.