ShinyHunters claims it used an Oracle PeopleSoft zero-day to hack FBI-related services and steal employee and applicant data, and also defaced the FBI jobs site

A sample of 5,000 alleged agents seen by 404 Media includes names, addresses, phone numbers, and details on FBI employees' spouses.

404 Media 2026-09-23 Joseph Cox

Context & Ripple Effects

The reporting has moved from ShinyHunters’ alleged PeopleSoft exploit to a sample said to reveal detailed FBI job assignments, raising the stakes from a website disruption to potential exposure of sensitive personnel information. The FBI-related claims remain unconfirmed.

ShinyHunters had already built a record of public claims about large-scale stolen-data sales in 2020, including alleged records from at least 13 companies. That history makes verification of the sample, rather than the group’s assertions alone, central to assessing the incident.

First-order effects

The FBI must assess whether employee and applicant records were accessed and whether the alleged jobs-site compromise requires containment, notification, or changes to recruiting systems.
Oracle faces immediate scrutiny over the alleged PeopleSoft zero-day, though ShinyHunters’ claimed exploit has not been independently confirmed.

Second-order effects

Organizations using PeopleSoft for personnel workflows may review their exposure and patch posture, particularly where HR data includes addresses, family details, or work assignments.
The alleged exposure of assignment-level information raises the operational cost of a personnel-data breach for agencies: affected staff may require risk assessment beyond ordinary identity-protection measures.

Third-order effects

If the PeopleSoft claim is validated, it would reinforce HR and applicant-management software as a high-consequence attack surface, where a single enterprise platform can concentrate sensitive workforce data.
Repeated public breach claims involving personnel records point toward security programs treating employee-data systems as operational-security assets, not merely administrative databases.

The trend: Enterprise HR platforms are becoming a more consequential security perimeter as personnel data combines identity details with information that can expose organizational roles and operations.

Discussion

@darkwebinformer @darkwebinformer on x
‼️ ShinyHunters has shared a message on their pay or leak portal to Director Brett Leatherman of the FBI Cyber Division and Director Kash Patel of the FBI:
@michaeldweiss Michael Weiss on x
This is extremely bad.
@olganyc1211 Olga Lautman on x
And of course, no one will be held accountable for this dangerous breach. Certainly, not Kash Patel
@darkwebinformer @darkwebinformer on x
ShinyHunters has defaced the FBI Jobs landing page, the page has since been reverted to a scheduled maintenance page.
@vxunderground @vxunderground on x
fbi job portal defaced and compromised? oh yeah, it's a silly tuesday
@vxdb @vxdb on x
ShinyHunters just defaced the FBI Jobs page
@josephfcox Joseph Cox on x
New: hackers say they have data on all FBI employees and spouses. I got a sample of 5,000 alleged employees, including name, physical address, phone number, and in some cases spouses. Could be a massive national security and counterintelligence risk https://www.404media.co/...
@josephfcox Joseph Cox on x
I have dug into some of the sample with open source info and previously compromised data. It shows people in this FBI breach are U.S DOJ personnel https://www.404media.co/...
@malwarejake Jake Williams on bluesky
If I were the FBI, I would not use a static page with animals on it the week after the whole “beastiality is not disqualifying anymore” debate got such attention. — I fear for those poor doggos... [embedded post]
@zackwhittaker@mastodon.social Zack Whittaker on mastodon
“We're sniffing out site updates for you!” is definitely one way to say “we were hacked and thousands of FBI agents and applicants had their information stolen.” — Those federal puppers are fucking adorable though. https://www.404media.co/... [image]
r/Epstein r on reddit
‘We Hacked the FBI:’ Hackers Say They Have Data on All FBI Employees
r/USNEWS r on reddit
‘We Hacked the FBI:’ Hackers Say They Have Data on All FBI Employees
r/Destiny r on reddit
ShinyHunters breached the FBI and claims to have data on all FBI employees
r/chaoticgood r on reddit
Hacking group ShinyHunters claims it has breached multiple FBI-related services and stolen data “on all FBI employees and applicants” …
r/InterstellarKinetics r on reddit
BREAKING: The Hacking Group, ShinyHunters, Tells 404 Media “We Hacked The FBI. We Hold Data On All FBI Employees & Applicants” …
r/privacy r on reddit
ShinyHunters hackers say they breached FBI, stole data on bureau employees
r/fednews r on reddit
‘We Hacked the FBI:’ Hackers Say They Have Data on All FBI Employees
r/cybersecurity r on reddit
‘We Hacked the FBI:’ Hackers Say They Have Data on All FBI Employees
r/FBI r on reddit
‘We Hacked the FBI:’ Hackers Say They Have Data on All FBI Employees
r/conspiracy r on reddit
‘We Hacked the FBI:’ Hackers Say They Have Data on All FBI Employees
r/politics r on reddit
ShinyHunters hackers say they breached FBI
r/Left_News r on reddit
‘We Hacked the FBI:’ Hackers Say They Have Data on All FBI Employees
NewsMax.com Michael Katz on x
ShinyHunters Says It Breached FBI, Stole All Staff Data
r/Destiny r on reddit
‘We Hacked the FBI:’ Hackers Say They Have Data on All FBI Employees
r/technology r on reddit
ShinyHunters hackers say they breached FBI, stole data on bureau employees
r/Information_Security r on reddit
‘We Hacked the FBI:’ Hackers Say They Have Data on All FBI Employees
r/technology r on reddit
Hacking group ShinyHunters claims it breached the FBI, stole agents' and applicants' data
r/FedEmployees r on reddit
FBI Data Breach?
r/espionage r on reddit
‘We Hacked the FBI:’ Hackers Say They Have Data on All FBI Employees
r/LincolnProject r on reddit
ShinyHunters hackers say they breached FBI, stole data on bureau employees
@_nathancalvin Nathan Calvin on x
I feel like lots of people have been asking “where is all the hacking we were warned …
@jedbrown.org Jed Brown on bluesky
Recall that Instructure paid a ransom to ShinyHunters in May after Instructure's third denial/minimization of Canvas SaaS hacks impacting over 8000 universities. They hit universities via Oracle PeopleSoft again in June. This was also an Oracle PeopleSoft zero-day leading to ac…

Chronicles