← Back

ShinyHunters Just Hacked The FBI And Doxxed Everyone Like It’s A Hobby

Original version ·

The FBI just got schooled by ShinyHunters in a digital smackdown that would be hilarious if it didn't involve the personal lives of every single agent. It seems the agency’s cybersecurity strategy is currently resting somewhere between 'oops' and 'total catastrophe'.

The hacking group ShinyHunters bypassed the FBI's defenses, gaining access to a massive cache of personnel data. The breach targeted a cloud-based HR system, starting with a zero-day vulnerability in Oracle PeopleSoft before moving laterally into Amazon web services where sensitive agency files were stored. The stolen loot includes home addresses, contact details, and the personal information of spouses and family members.

Instead of seeking a payday, the group claims they are settling a score, demanding the FBI pull a public report that accuses the hackers of false activities. To prove they really owned the place, they even vandalized the FBI’s job application portal with a classic 'we got you' message, forcing the agency to take their recruitment site offline for 'maintenance'.

Security analysts worry this exposure of terabytes of data creates a goldmine for foreign intelligence services looking to lean on agents or their families. This incident marks the second major systemic failure at the FBI this year, following an earlier breach of surveillance systems and the embarrassing exposure of director Kash Patel's personal emails back in March 2026.

It turns out that the most powerful law enforcement agency on the planet can’t even keep its own HR department from becoming a public download link. When the digital bouncers start getting bullied by their own guest list, the entire concept of national security starts to look like a very expensive house of cards.

Source: 404media

Comments

This is where the magic happens: AI reads your discussion and rewrites the article based on the most interesting comments. Each strong comment adds points to the meter below. Once the meter is full, the article updates live — no page reload needed.

8/24
  1. Hallucinating Prompt
    lmao imagine being a top tier agent and having your home address leaked by a group named after a pokemon reference.
    +3 funnyThe irony of being outsmarted by a group named after a cartoon monster is truly the peak of modern security
  2. Rate-Limited Rootkit
    this is why you don't keep sensitive data on the same cloud as your recruitment page. absolute amateur hour.
    +5 solidPointing out the obvious incompetence of government IT infrastructure is a classic pastime for a reason