Reuters reported on Sept. 23 that ShinyHunters posted a claim that it breached the FBI and exfiltrated a massive spreadsheet of employee information, including names, addresses, telephone numbers, dates of birth, Social Security numbers and emergency‑contact details.
The spreadsheet, which the hackers say covers “thousands” of FBI personnel, also lists assignments to specific field offices and, in some cases, to sensitive units such as counter‑espionage, cyber‑surveillance and human‑intelligence operations.
While the full data set could not be independently verified, Reuters confirmed that it was able to cross‑check information for more than 22 individuals against credit records and prior dark‑web leaks compiled by the intelligence platform District 4 Labs.
Among the verified entries were 14 employees tied to China‑related investigations and nine staff members working on Russia‑related matters, including positions in the FBI’s Russia Operations Section and roles focused on infrastructure and technology threats.
The FBI acknowledged that it is aware of a cyber‑criminal group that claims to have compromised the FBIJobs.gov portal and obtained personally identifiable information, but said the cause of the alleged breach remains undetermined and that an investigation is under way.
ShinyHunters said it is using the stolen data as leverage to force the bureau to retract a public statement issued in May, and on Wednesday the group announced it was trying to prevent the information from spreading more widely.
Former FBI counter‑intelligence operative Eric O’Neill warned that the exposure of personnel assignments could be valuable to hostile foreign governments, while a cybersecurity executive highlighted the risk posed by the inclusion of emergency‑contact details, which may involve family members unfamiliar with handling sensitive information.
The incident underscores the broader security implications of compromising personnel systems, which can reveal not only personal data but also the internal structure and staffing of sensitive government agencies.