The FBI says it is investigating a reported breach of its system after a cybercrime group claimed to have stolen sensitive information on thousands of bureau personnel.
The hackers, Shiny Hunters, say they now hold private data on all the bureau staff - around 38,000 people - including anyone who applied to join the investigative agency.
The group says it has every agent's name, role, badge number and personal details including home address, phone numbers and spouse information.
In a statement posted on X, the FBI said it was aware of the claim and the agency was "actively and aggressively investigating the matter".
The criminals claim to have breached the FBI's servers on Monday night and began contacting reporters on Tuesday sharing samples and screenshots of the stolen data.
The BBC has seen a small portion of the data which appears to be genuine.
According to Reuters, some of the data contains details about officials' job assignments, including sensitive work against Chinese spies, Russian intelligence and drug cartels.
ShinyHunters is an international collective of hackers, believed to have originally started in France. It has been behind a number of high-profile breaches including on Rockstar Games in April and a highly disruptive hack on education platform Canvas in May.
The group claims to have found a vulnerability in the Oracle cloud storage system used by the FBI to breach multiple systems including FBIJOBS, FBI BEAST, which does background checks on employees and applicants, FBI MedLink, which holds agent's medical records and FBI BICS, which holds investigation information.
Source link







