Jpost ShinyHunters Claims Major Data Breach of FBI Systems
Article Content
- •ShinyHunters claims to have stolen data on nearly all FBI employees and applicants.
- •The breach exploited a zero-day vulnerability in Oracle's PeopleSoft system.
- •The FBI is investigating the breach and has taken affected systems offline.
The hacking group ShinyHunters has claimed responsibility for breaching FBI systems, asserting that they stole sensitive data on nearly all FBI employees and job applicants. The attack reportedly exploited a zero-day vulnerability in Oracle's PeopleSoft, allowing remote code execution. ShinyHunters claims to have obtained between 2TB and 3TB of data, including personally identifiable information (PII) and protected health information (PHI). The group has demanded the FBI retract a public advisory that detailed their tactics, asserting that their actions are not financially motivated. The FBI has acknowledged the claims and is currently investigating the incident. Affected systems include the FBI's job application portal, which was taken offline following the breach. Reports indicate that the hackers shared a screenshot of a defaced FBI jobs website as proof of their claims.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (100)
Following this threat?
Track shinyhunters, FBI and CVE-2026-35273 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
SSRF to RCE Vulnerability in Oracle PeopleSoft Exploited by ShinyHunters On September 25, 2026, Mandiant reported ongoing mass exploitation of CVE-2026-35273 by the ShinyHunters group, a vulnerability in Oracle PeopleSoft. The vulnerability, first reported by TrendAI's Zero Day Initiative on June 10, 2026, allows attackers to leverage a Server-Side Request Forgery (SSRF) to achieve remote… 
Volt Typhoon's Silent Train Network Targets US Critical Infrastructure The Chinese state-sponsored hacking group Volt Typhoon has been linked to a covert network called Silent Train, which has exploited at least four zero-day vulnerabilities over three years. This network utilizes rapidly rotating chains of compromised SOHO routers, IoT devices, and enterprise infrastructure to access…