Shiny Hunters Claims FBI Breach, Says It Stole Data on Agents and Job Applicants
Summary: ShinyHunters claimed on Tuesday that it breached the FBI and stole data on current and former employees, saying it compromised Criminal Justice, HR, Medlink and other services; a spokesperson told The Hacker News the stolen data is around 2 TB and includes medical, prescription and diagnosis records from Medlink. The group said it exploited a new Oracle PeopleSoft zero-day for remote code execution and defaced FBIjobs.gov, and the FBI said it is investigating the claimed compromise of FBIJobs.gov and alleged impact to employee PII.
Key Takeaway: The group says the Medlink data alone carries agents' medical histories, drug information, diagnoses and prescriptions - health records that can be used for targeting or coercion long after any portal is restored. The FBI itself says the point of breach is still undetermined, whether a third party or its own enterprise, which is the same third-party trust question sitting in most organizations' vendor lists.
Read the original at The Hacker News ↗
- Topics
- Threat Actors & Nation-State
- Mentions
- CVE-2026-35273
- Related
- Shiny Hunters Renewed Mass Exploitation Campaign Targeting Oracle People Soft Cyber Risks · Sep 25, 2026CVE-2026-35273: Oracle People Soft Enterprise People Tools Missing Authentication for Critical Function Vulnerability Known Exploited Vulnerabilities · Jun 12, 2026