FBI investigates claims of PeopleSoft zero-day intrusion and data theft

FBI investigates without confirming a breach

ShinyHunters claims it used a previously unknown, unpatched Oracle PeopleSoft vulnerability to gain access to FBI systems, move into FBI-managed AWS GovCloud infrastructure, and take 2TB to 3TB of employee, applicant, and internal data. The group also shared screenshots and purported sample records. The FBI said it is investigating the claims, while the underlying intrusion and alleged theft remain unverified.

The alleged intrusion and data theft have not been confirmed by the FBI. The record describes ShinyHunters’ claims and the FBI’s decision to investigate.

ShinyHunters has publicly alleged an intrusion involving FBI systems and an unpatched Oracle PeopleSoft zero-day, prompting the FBI to investigate unauthorized-activity claims affecting FBIjobs.gov.

The allegations combine a claimed compromise of FBI-related employment systems with a purported zero-day—an unknown vulnerability without an available patch. If substantiated, the claim would also indicate alleged access to sensitive employee and applicant information; however, those details have not been confirmed.