ShinyHunters Claims Major FBI Data Breach

Ca.News.Yahoo

ShinyHunters Claims Major FBI Data Breach

First seen 27 Sep 2026, 03:20 UTC • •59.8

Article Content

1 / 3

Browse articles

ThreatCluster •September 28, 2026 at 02:35 UTC

•ShinyHunters claims to have stolen sensitive data from thousands of FBI employees.
•The breach includes job assignments, addresses, and social security numbers.
•The FBI has not yet commented on the breach or its implications.

The hacking group ShinyHunters announced on September 22, 2026, that it breached the FBI, claiming to have stolen sensitive data on thousands of employees, including job assignments, addresses, and social security numbers. The FBI has not yet commented on the breach. ShinyHunters is known for targeting various organizations, including corporations and educational institutions, and this incident marks a significant escalation in their activities. The exact attack vector remains unclear, but the scale of the data stolen indicates a serious breach of security protocols within the FBI. As of now, the FBI has not confirmed the breach or provided any details regarding the investigation.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Answers cite the sources they use

Updated 17h ago How this analysis works

Timeline

2026-09-22

ShinyHunters claims FBI breach

The hacking group announced it breached the FBI and stole data on thousands of employees.

Channelnewsasia

2026-09-26

Yahoo reports on breach details

Yahoo detailed the data stolen, including sensitive personal information of FBI officials.

More articles in this cluster (2)

Threat Graph

2 entities, 1 inferred relationships (STIX 2.1).

The full threat graph for this incident is free in the 7-day Starter trial.

Create free account

No card · 30 seconds

See everything included

Technique (1)

Data Breach

Weakness (1)

CWE-200 - Exposure of Sensitive Information

Relationships

Data Breach related to CWE-200 - Exposure of Sensitive Information

Continue Reading

Critical Zero-Day Exploits Target F5 and Check Point Products F5 Networks released emergency hotfixes for a critical zero-day vulnerability, CVE-2026-94127, in its BIG-IP Access Policy Manager on September 22, 2026, after confirming active exploitation. This flaw allows unauthenticated remote code execution (RCE) and has a CVSS score of 9.8. Concurrently, Check Point disclosed…

Critical Zero-Day Vulnerability in F5 BIG-IP APM Exploited for Remote Code Execution F5 Networks has reported a critical vulnerability in its BIG-IP Access Policy Manager (APM), tracked as CVE-2026-94127, which is being actively exploited in the wild. The flaw allows unauthenticated attackers to execute remote code on systems configured with both an APM access policy and an OAuth profile. This…