Sensitive Data of Thousands of Personnel Stolen in Cyber Attack Against the FBI

It has been claimed that sensitive data belonging to approximately 60,000 current and former personnel was stolen in a cyber attack against the Federal Bureau of Investigation. The ShinyHunters group, which claimed responsibility for the attack, stated that they would publish the data if their demands are not met.

Scope of the Attack and Claims

While it was initially thought that the breach affected 38,000 current employees, the hackers stated that they had initially miscalculated the scale of the data theft. The group claims to possess sensitive information belonging to approximately 60,000 active and former employees.

Warnings from Security Experts

Jamie Akhtar, director at CyberSmart, stated that the claims should be approached with caution, but that the incident appears extremely alarming. It was emphasized that such data could be used for phishing, identity spoofing, and operations targeting law enforcement officers.

Demands and Method of the Hacker Group

Communicating with journalists via Telegram, the ShinyHunters group announced that they would publish the entire dataset within five days if the FBI does not fulfill their demands. The international group, active since 2019, is known to have been involved in large-scale attacks in the past.

Targeted Systems and FBI's Statement

The group claims to have exploited a vulnerability in an Oracle cloud storage system used by the FBI. In a statement on X, the FBI reported that it is trying to determine whether the systems were directly breached or if a third-party provider was compromised.