00:02FBI agents' home addresses, family details, and sensitive job information may have been exposed in a major data breach.
00:11A hacking group claims it stole a huge trove of information from the FBI's jobs portal, fbijobs.gov, raising serious
00:21concerns about the safety of bureau employees, their families, and potentially sensitive operations.
00:27The alleged breach came to light after the cyber criminal group Shiny Unters claimed it had obtained data belonging to
00:36current and former FBI personnel.
00:39And the information reportedly goes far beyond ordinary employee records.
00:44According to reporting by the New York Times, a sample of the allegedly stolen records included names, home addresses, phone
00:53numbers, work email addresses, social security numbers,
00:57birth dates, and hiring dates.
01:00Some records reportedly also contained information about spouses and other family members, including parents, siblings, children, and emergency contacts.
01:11But the most sensitive part may be the professional information.
01:15The reported sample included personnel connected to counterintelligence, narcotics, and national security desks dealing with threats involving Russia, China, and
01:27Iran.
01:27That combination of personal and professional information is what has security experts particularly concerned.
01:35Imagine having an individual's name, home address, family contacts, and workplace information all connected in one record.
01:45For criminals or foreign intelligence services, such a database could potentially make it easier to identify, profile, or target individuals.
01:54Some records also reportedly contained identification information associated with the Transportation Security Administration's pre-check program, raising additional concerns about
02:06travel-related information.
02:08The FBI has not publicly confirmed the full scope of the alleged breach, or exactly how many people were affected.
02:16But Shiny Hunters has claimed the stolen records involve tens of thousands of people.
02:22The group initially threatened to release the data.
02:25Then, in a statement reported on Monday, the hackers claimed they had never intended to publish the data.
02:32Shiny Hunters described the operation as a marketing campaign and said it was not taking further action with the information.
02:40But cybersecurity experts warned that the threat does not necessarily disappear simply because the files are not publicly posted.
02:48The data could potentially be sold or transferred to other criminals or intelligence-linked groups.
02:54And there is another major concern.
02:58Information stolen in one breach can sometimes be combined with information from other data leaks.
03:04That can create much more detailed profiles of individuals than any single database could provide.
03:10The FBI has responded by warning its workforce to remain vigilant.
03:15According to an internal memo described by the New York Times, bureau leadership said it was operating under the premise
03:22that the threat actor was also exfiltrating personal information of all FBI employees.
03:29Employees were advised to report unsolicited contacts or threats, avoid answering calls from unknown numbers, and take precautions with their
03:38voicemail.
03:39The FBI says it is investigating the incident and communicating with people who may have been affected.
03:45There is also a separate claim that makes the alleged breach even more sensitive.
03:50Shiny Hunters says it obtained medical information belonging to FBI employees, including psychiatric records and documents related to blood and
03:59urine tests.
04:01Reuters reported that the group claimed to have stolen psychiatric and medical evaluation records, including material connected to fitness for
04:09duty examinations.
04:10Reuters said it was able to partially verify some of the documents, but could not establish the full scope of
04:17the alleged medical data theft.
04:19And the FBI has not publicly confirmed those claims.
04:23So how did the alleged hack happen?
04:26That remains unclear.
04:28Shiny Hunters has claimed it exploited a previously unknown vulnerability in Oracle PeopleSoft, software used for human resources and financial
04:37management,
04:37Google's threat intelligence unit has separately reported that Shiny Hunters has been involved in a renewed campaign exploiting a vulnerability
04:46in Oracle PeopleSoft.
04:48But there is an important distinction.
04:50The FBI has not publicly confirmed that this vulnerability was the method used to compromise its systems.
04:57Following the incident, FBI job portals have remained offline.
05:01For now, the biggest unanswered questions are the exact amount of information taken, how many people were affected, whether all
05:10of the hackers' claims are accurate, and what will happen to the allegedly stolen data.
05:16What makes this case particularly serious is not simply the number of records.
05:21It is the potential combination of identities, addresses, family information, employment details, and sensitive assignments.
05:30The FBI says its investigation is continuing, and until the full scope is established,
05:36the alleged breach remains a major cybersecurity and personnel security concern.
