FBI Confirms Data Breach of Staff Personal Information

Internal notifications confirmed that the stolen files contain names, addresses, job titles, and Social Security numbers of current employees. Reports indicate the leak extends to highly sensitive medical data, including psychiatric records and laboratory test results. The hacking group ShinyHunters claimed responsibility, asserting they gained access by exploiting a vulnerability in an Oracle PeopleSoft server used to manage human resources information on the FBIJobs.gov site.

National security experts have labeled the incident a counterintelligence disaster, warning that the exposure leaves thousands of personnel vulnerable to phishing, profiling, and foreign intelligence operations. While the bureau has alerted its workforce, it remains unclear whether the incident has been reported to Congress as a major breach under federal law. The FBI has yet to confirm if the scale of the theft meets the legal threshold for mandatory congressional disclosure, and the job portal remains offline as investigations continue.