FBI Alerts Staff of Potential Data Breach by Hacker Group ShinyHunters
- An internal FBI memo suggests that the hacker group ShinyHunters may have stolen personal data on every FBI staffer following a breach of FBIjobs.gov.
- ShinyHunters claims to have acquired between two to three terabytes of data, including information on agents, job applicants, and some spouses.
- The breach reportedly exploited a zero-day vulnerability in Oracle’s PeopleSoft software, although the FBI has not confirmed this method.
- FBI Cyber Division Chief Brett Leatherman addressed the hackers publicly after a Dutch arrest related to cybercrimes was announced.
The FBI is operating under the assumption that personal data of all its employees might be compromised due to a security breach attributed to the hacker group ShinyHunters. This incident highlights vulnerabilities in widely used HR software like Oracle’s PeopleSoft and underscores ongoing cybersecurity threats faced by organizations globally.
Despite ShinyHunters’ claim of possessing vast amounts of sensitive data, they have stated no intention to publish it as their ultimatum period has ended without action. The situation remains under investigation as the FBI continues its efforts to address potential risks and secure its systems. (Source)
