Back Theregister ShinyHunters claims FBI hack: 'This is NOT financially motivated'
UK cops arrest 2 EvilTokens suspects, Microsoft seizes 50 phishing kit websites 2 hours ago
UK cops arrest 2 EvilTokens suspects, Microsoft seizes 50 phishing kit websites
FBI: Fake cop and government impersonation scams cost victims $1.6B 4 days ago
FBI: Fake cop and government impersonation scams cost victims $1.6B
Bring on the AI swarms. They’re the only thing that can defend us now that AI is free 6 days ago
Bring on the AI swarms. They’re the only thing that can defend us now that AI is free
US claims Chinese AI companies’ core AI strategy is distilling American models 13 days ago
US claims Chinese AI companies’ core AI strategy is distilling American models
UK food supply chain at risk from hostile attacks 15 days ago
UK food supply chain at risk from hostile attacks
ShinyHunters claims it hacked the FBI and stole more than 2 TB of employee data - and this time it’s personal. The gang wants the Feds to correct the record on how it operates.
“This is NOT financially motivated,” a Shiny spokesperson told The Register . “We want the FBI to correct or retract their statements they made, which included substantial false allegations.”
The FBI did not immediately respond to The Register ’s request for .
According to a ShinyHunters spokesperson, the extortion group exploited an Oracle PeopleSoft zero-day vulnerability on the FBI jobs webpage , which it says allowed remote code execution (RCE) on the servers. The group then defaced the website, replacing it with a “This site has been seized by ShinyHunters” banner and image shared with The Register .
At press time, the site says it is “currently down for maintenance but will be back up soon!”
ShinyHunters also claims it moved laterally from the compromised site onto the FBI’s managed servers on AWS GovCloud, and downloaded 2 TB to 3 TB of data belonging to current, former, and prospective FBI employees.
“We hold data on all FBI employees and applicants,” the spokesperson told us.
ShinyHunters claims the compromised FBI services include human resources, MedLink, and Criminal Justice Information Services.
Neither Oracle nor AWS immediately responded to our inquiries, including whether Oracle is aware of a PeopleSoft preauth RCE zero-day, and whether AWS has any insight into the alleged data theft. We will update this story if we receive any response.
Unlike most of the group’s smash-and-grab operations that involve a multimillion-dollar ransom demand to not leak the stolen files, ShinyHunters said it isn't seeking an extortion payment from the FBI.
Instead, it wants the federal cops to retract statements made ShinyHunters in a May 15 bulletin, shortly after the gang broke into ed-tech giant Instructure's Canvas platform and claimed to have stolen data tied to hundreds of millions of students, teachers, and staff. The FBI said ShinyHunters uses “harassment strategies, sending threatening text messages and phone calls to victims and their family members, and in some cases, swatting.”
The security alert also said that extortionists “may falsely claim to have sensitive or compromising information, including embarrassing photographs or videos of victims, which frequently do not exist.”
Shiny claims none of this is true. “I have been doing my very best to combat these allegations,” they told us. “And this is the best way to do it.” ®
ShinyHunters claims FBI hack: 'This is NOT financially motivated'
This time it's personal
ABBYY gives old-school OCR a job in the AI pipeline
FineParser runs in a CPU-powered container, preserving tables and layout before handing documents to an LLM
HPE makes its “unified storage” claim real as B10000 R6 hits GA
PARTNER CONTENT: Pairs block and adjacent file workloads with independent scaling of performance and capacity
NightmareEclipse's latest zero-day leaves Microsoft Defender stuck in the past
BigDiskBuster leaves Microsoft's antivirus running but unable to install updates
Your cloud survived everything except the real world
War damage, air traffic chaos, and a storage shortage expose the cost of treating resilience as someone else's problem
Z.ai says sorry for slurping up your code, open sources ZCode
China’s AI darling goes on the defense after engineer highlighted Grok-esque security flaws
SAAS Salesforce staggers back to feet after global outage
Salesforce staggers back to feet after global outage
databases Oracle celebrates banner quarter with another round of layoffs
Oracle celebrates banner quarter with another round of layoffs
Anthropic decides to support OpenAI's markdown instructions spec
Anthropic decides to support OpenAI's markdown instructions spec
Microsoft agentically ports Copilot runtime to Rust for $120K
Microsoft agentically ports Copilot runtime to Rust for $120K
ai and ml Ex-FTC boss Khan urges Uncle Sam to break out the handcuffs for AI CEOs, citing 1934 precedent
Ex-FTC boss Khan urges Uncle Sam to break out the handcuffs for AI CEOs, citing 1934 precedent
software Fedora 45 beta drags the Linux console into the 21st century
Fedora 45 beta drags the Linux console into the 21st century
Z.ai says sorry for slurping up your code, open sources ZCode China’s AI darling goes on the defense after engineer highlighted Grok-esque security flaws
Z.ai says sorry for slurping up your code, open sources ZCode
China’s AI darling goes on the defense after engineer highlighted Grok-esque security flaws
UPDAted Register reader hit with surprise bill after Microsoft portals disagreed Did Copilot write the synchronization code?
Register reader hit with surprise bill after Microsoft portals disagreed
Did Copilot write the synchronization code?
Perpetual underdog AMD nips at Nvidia's heels as it joins the $1T club Fueled by the AI boom, the House of Zen's rise isn't just Instinct - Lisa Su is riding high on some Epyc design chops too
Perpetual underdog AMD nips at Nvidia's heels as it joins the $1T club
Fueled by the AI boom, the House of Zen's rise isn't just Instinct - Lisa Su is riding high on some Epyc design chops too
Treasury chief says AI bosses, not their bots, will carry the can for criminal acts 'Humans are responsible, not the AI,' argues Scott Bessent as he calls out OpenAI agents' hack of Hugging Face
Treasury chief says AI bosses, not their bots, will carry the can for criminal acts
'Humans are responsible, not the AI,' argues Scott Bessent as he calls out OpenAI agents' hack of Hugging Face
Google smacks forehead, realizes $899+ thin-and-lights were what it was missing 'A new category,' insists the Chocolate Factory, not a premium Chromebook - yet some of the family resemblance remains
Google smacks forehead, realizes $899+ thin-and-lights were what it was missing
'A new category,' insists the Chocolate Factory, not a premium Chromebook - yet some of the family resemblance remains
Security Russians are posing as Signal support to launch phishing attacks PLUS: US takes down Iranian propaganda sites; Marketing company asks 'Why Do We Have Your Information?' And more!
Russians are posing as Signal support to launch phishing attacks
PLUS: US takes down Iranian propaganda sites; Marketing company asks 'Why Do We Have Your Information?' And more!
Security Microsoft patches failed to fix on-prem SharePoint, which is now under zero-day attack PLUS: China upgrades smartphone surveillance tools; Ring eases anti-snooping stance; and more
Microsoft patches failed to fix on-prem SharePoint, which is now under zero-day attack
PLUS: China upgrades smartphone surveillance tools; Ring eases anti-snooping stance; and more
Black Hat and DEF CON DEF CON Franklin project enlists hackers to harden critical infrastructure Voting village reports have been so successful, says Jeff Moss, that the whole of DEF CON will now be included
Black Hat and DEF CON
DEF CON Franklin project enlists hackers to harden critical infrastructure
Voting village reports have been so successful, says Jeff Moss, that the whole of DEF CON will now be included
Security EQT buys majority in Swiss cybersecurity biz Acronis Went at equivalent of $3.5B+ valuation for entire firm, though portion sold not specified
EQT buys majority in Swiss cybersecurity biz Acronis
Went at equivalent of $3.5B+ valuation for entire firm, though portion sold not specified
Malware Month Ten years since the first corp ransomware, Mikko Hyppönen sees no end in sight On the plus side, infosec's a good bet for a long, stable career
Ten years since the first corp ransomware, Mikko Hyppönen sees no end in sight
On the plus side, infosec's a good bet for a long, stable career
KDE turns 30 and someone's brought an AI-native desktop proposal Akademy talk imagines Plasma assembling itself around a personal model of each user
KDE turns 30 and someone's brought an AI-native desktop proposal
Akademy talk imagines Plasma assembling itself around a personal model of each user
Shopify extends lifeline to Tailwind as vibe coding erodes web dev platform's bottom line Acquisition gives open source CSS framework 'a stable long-term '
Shopify extends lifeline to Tailwind as vibe coding erodes web dev platform's bottom line
Acquisition gives open source CSS framework 'a stable long-term '
Switzerland tests a FOSS escape route from Microsoft 365 Swiss Army sticks a knife in American cloud apps with its own FOSS push
Switzerland tests a FOSS escape route from Microsoft 365
Swiss Army sticks a knife in American cloud apps with its own FOSS push
Feel peak Windows was 7? You might like Kumander Linux Debian and Xfce – solid, sensible choices – with a pretty skin
Feel peak Windows was 7? You might like Kumander Linux
Debian and Xfce – solid, sensible choices – with a pretty skin
Canonical shuttering some of its legacy chat channels The Ubuntu Pastebin went in June, IRC gets demoted
Canonical shuttering some of its legacy chat channels
The Ubuntu Pastebin went in June, IRC gets demoted
Audacity audio-editing app no longer looks like it's from the early 2000s The FOSS tool for audio editing has a fresh coat of paint, and new features to boot
Audacity audio-editing app no longer looks like it's from the early 2000s
The FOSS tool for audio editing has a fresh coat of paint, and new features to boot
The full story
This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.
