FBI investigates claim by hackers they stole data on all agency staff

September 24, 2026

The FBI is investigating claims by the hacking group Shiny Hunters that it has compromised sensitive data on approximately 38,000 FBI employees, including agents' names, roles, badge numbers, home addresses, and family information. The hackers allege they exploited vulnerabilities in Oracle cloud storage systems used by the FBI to access multiple internal databases containing employment, medical, and investigation records. Rather than seeking financial gain, the group demands the FBI retract a May advisory that characterized them as threat actors, threatening to publish all stolen data if the bureau doesn't comply within one week.

Who is affected

Approximately 38,000 FBI staff members and agents whose personal information was allegedly stolen
Spouses and family members of FBI employees whose information is included in the breach
FBI officials working on sensitive assignments against Chinese spies, Russian intelligence, and drug cartels
The FBI as an organization
Third-party providers that support FBIJobs.gov

What action is being taken

The FBI is actively and aggressively investigating the matter
The FBI is working closely with third-party providers that support FBIJobs.gov to mitigate risks
The FBI is attempting to determine whether hackers breached its systems directly or accessed data through a third party

Why it matters

This breach represents an extremely serious data compromise that could endanger FBI agents and their families by exposing home addresses, phone numbers, and spouse information. The stolen data includes sensitive details about officials' job assignments involving counterintelligence work against foreign adversaries and criminal organizations, which could compromise ongoing investigations and national security operations. The incident demonstrates that even elite law enforcement agencies with sophisticated security measures remain vulnerable to determined hacking groups, and the retaliatory nature of the attack shows criminals attempting to intimidate government agencies into silence.

What's next

Shiny Hunters has given the FBI one week to correct or remove allegations from its May advisory, or the group will publish the full databases
The FBI may intensify efforts to track down and prosecute members of the hacking group in response to the threat

Read full article from source: BBC