ShinyHunters alleges FBI jobs-site breach and 2–3 TB data theft
SecurityUnverifiedUpdated:
ShinyHunters claims it breached an FBI jobs page and stole about 2–3 TB of personnel-related data. The site displayed a maintenance notice at publication, while the intrusion and data-theft details remain unverified.
A claimed path from a jobs site to GovCloud
ShinyHunters told The Register it exploited an alleged zero-day vulnerability in Oracle PeopleSoft on the FBI jobs webpage. The group claimed this enabled remote code execution, website defacement, lateral movement to FBI-managed AWS GovCloud servers, and the download of data concerning current, former, and prospective FBI employees. It said the affected services included human resources, MedLink, and Criminal Justice Information Services, and that it was seeking a retraction of FBI statements rather than payment.
The jobs site displayed a maintenance notice at publication, but that alone does not establish ShinyHunters’ breach claims.
ShinyHunters now alleges that it breached an FBI jobs webpage, reached other FBI-managed services, and took roughly 2 TB to 3 TB of personnel-related data.
If accurate, the allegation would expand from a defaced public-facing jobs page to claimed access to personnel-related systems and a large volume of data. The purported PeopleSoft preauthentication remote-code-execution flaw has not been independently confirmed.
Sources
- The RegisterShinyHunters claims FBI hack: 'This is NOT financially motivated'Read source →