The FBI has launched an investigation into allegations that the cyber-crime collective known as ShinyHunters has compromised the personal and professional information of its entire workforce. The hackers claim to possess data on roughly 38,000 individuals, including names, badge numbers, home addresses, phone numbers, and details regarding spouses.

According to reports, the breach allegedly occurred on Monday night. The group has since shared samples of the data with media outlets, with some reports indicating that the information includes sensitive details regarding investigations into foreign intelligence services and drug cartels. The hackers claim to have exploited a vulnerability within the Oracle cloud storage systems utilized by the bureau, potentially exposing records from internal platforms such as FBIJOBS, FBI BEAST, FBI MedLink, and FBI BICS.

Advertisement

Rather than seeking financial gain, the group stated on the dark web that the attack is a retaliatory measure. They are demanding that the FBI retract a May advisory that labeled the collective as "threat actors" who use exaggerated claims to extort victims. ShinyHunters has issued an ultimatum, threatening to release the full database if the bureau does not remove the characterization within one week.

The FBI acknowledged the situation in a statement posted to X, noting that it is "actively and aggressively investigating" the claim. The agency is currently working to determine if the breach originated within its own systems or through a third-party provider. Former UK National Cyber Security Centre head Professor Ciaran Martin described the potential breach as "as serious as it gets," while security experts suggest the move represents a bold attempt by the hackers to control their public narrative.

Source: BBC News