The bureau has not yet publicly confirmed a breach, but has told its agents that their personal information and Social Security numbers were exposed.
FBI reportedly declares ‘cyber security incident’ after hackers steal agents’ personal data
About this summary. This is a short, independently written summary of an article first published by TechCrunch. Cyber Security News did not report or verify the underlying story. Read the original: https://techcrunch.com/2026/09/28/fbi-reportedly-declares-cyber-security-incident-after-hackers-steal-agents-personal-data/
Source attribution: headline and facts are from TechCrunch (techcrunch.com). Summary method: excerpt of the source description. See our source attribution policy.
Related coverage
ShinyHunters exploiting workarounds for Oracle PeopleSoft bug, Mandiant warns
A vulnerability in a popular line of products from Oracle is being used in a new campaign by the prolific ShinyHunters hacking group, which recently claimed credit for…
Dutch Police Arrest ‘Reformed’ Hacker in Shiny Hunters Investigation
Authorities in the Netherlands have arrested a 23-year-old convicted cybercriminal on suspicion of aiding in data thefts and extortions by the prolific hacker group…
ShinyHunters trades financial extortion for a reckless war of ego with the FBI
Threat hunters and researchers are alarmed by what they’ve seen in data ShinyHunters claims it stole from the FBI. Limited samples of the stolen data contain FBI agents’…
FBI job portals remain offline after ShinyHunters claims breach via PeopleSoft zero-day
The FBI’s online portals for job applicants (at apply.fbijobs.gov) and special agent applicants (at fbijobs.gov/special-agents) are still unavailable, following what…
28th September – Threat Intelligence Report
For the latest discoveries in cyber research for the week of 28th September, please download our Threat Intelligence Bulletin. TOP ATTACKS AND BREACHES The FBI has…
Attack Surface Management in 2026: Why Point-in-Time Scans Can’t Keep Up With Cloud Sprawl
Cloud infrastructure now changes by the hour, yet many security teams still map their external attack surface once a quarter or once a year. That mismatch creates blind…