FBI investigates claimed FBIJobs.gov compromise and possible PII exposure
SecurityUnverifiedUpdated:
The FBI says it is investigating ShinyHunters’ claim that FBIJobs.gov was compromised and that employee personally identifiable information may have been affected, while the alleged entry point has not been determined.
ShinyHunters claims entry through PeopleSoft
ShinyHunters told The Register it entered the FBIJobs.gov portal through an alleged Oracle PeopleSoft zero-day vulnerability, then accessed managed servers on AWS GovCloud and took personnel files involving current, former, and prospective FBI employees. The group said the alleged vulnerability had no patch.
The FBI said it is working with third-party providers supporting FBIJobs.gov to mitigate risk. The portal was reported to remain unavailable as of Friday.
The available account does not establish the FBIJobs.gov portal’s condition before the alleged compromise, or a confirmed prior state for the affected data.
ShinyHunters has claimed it compromised FBIJobs.gov and accessed personnel files. The FBI says it is investigating the claimed compromise and alleged impact to employee PII; the point of breach remains undetermined.
The FBI is investigating entry and impact
The claimed incident concerns a federal employment portal and potentially sensitive information about FBI personnel and applicants. It also raises an unresolved claim of an unpatched Oracle PeopleSoft vulnerability, but neither the alleged attack path nor the scope of exposure is established.
Sources
- The RegisterShinyHunters tells The Reg: We hacked the FBI to 'protect our business'Read source →