Photo via Times of India

'Almost all agents' data stolen? Hackers claim they breached FBI jobs site, stole 2TB of data

Read the original at Times of India ↗
Cite

Patnaik, P. (2026, September 23). 'Almost all agents' data stolen? Hackers claim they breached FBI jobs site, stole 2TB of data. Times of India. https://timesofindia.indiatimes.com/world/us/almost-all-agents-data-stolen-hackers-claim-they-breached-fbi-jobs-site-stole-2tb-of-data/articleshow/134425198.cms

Dated when The Aporia collected the article, usually within hours of publication. Check the original for its exact date and byline.

Times of India · collected 2026-09-23 · by Prisha Patnaik

Quick Summary

ShinyHunters, a hacking group, claims it breached the FBI's job application website, stealing over 2 terabytes of data containing personal information on thousands of FBI employees and applicants. This includes details such as names, agent status, email addresses, phone numbers, home addresses, and in some cases, spouses' Social Security numbers. The FBI is investigating unauthorized activity on its site but has not confirmed the stolen data's legitimacy or extent independently. Cybersecurity experts warn that if verified, this breach could pose long-term risks to individuals involved and their families due to potential circulation of sensitive information among criminal groups.
Written by AI on 2026-09-23, from this article's own text only (the story summary below draws on all the coverage).

AI analysis

Story summary

ShinyHunters, a notorious hacking group, claimed on September 22 that they breached the FBIjobs.gov website and stole personal data from thousands of current and former FBI employees. The hackers obtained sensitive information such as names, home addresses, phone numbers, email addresses, and dates of birth for many agents and job applicants. ShinyHunters defaced the FBI's jobs portal with a mocking message that included President Trump’s signature phrase "Thank you for your attention to this matter," implying retaliation against his administration.

The FBI acknowledged unauthorized activity affecting their job application site but did not confirm the theft of data. Reuters partially verified some stolen information by cross-referencing it with credit bureau records and previous breaches, finding matches in at least nine cases. The hackers threatened further action if the FBI does not address what they see as false allegations against them.

The breach potentially impacted a significant number of individuals who applied for or held positions within the FBI since 2017 when the site became the primary application platform for agent and support roles. The full extent of data compromised remains unclear, but ShinyHunters shared what they claim is a small sample dataset involving approximately 5,000 individuals.

Written for “FBI Data Breach” on 2026-10-31, grounded in this article and the 22 other(s) covering the same event.

Story

📰 FBI Data Breach
Crime & Law · 23 article(s) covering the same event. Compare every outlet's account →

Compared with similar articles

This article reads unscored and hedges 22% of its claims. Each row says how that neighbour differs.
The Guardian
Hedges 5 of 12 claims Outlet record 66/100
NBC News
Hedges 9 of 25 claims Outlet record 60/100
ABC News (US)
Hedges 6 of 11 claims Outlet record 70/100
The Sydney Morning Herald
Hedges 8 of 29 claims Outlet record 61/100
The Straits Times
Hedges 6 of 21 claims Outlet record 66/100
The Straits Times
Hedges 7 of 29 claims Outlet record 66/100
ABC News (AU)
Hedges 7 of 22 claims Outlet record 68/100
Daily Mail
Hedges 4 of 20 claims Outlet record 68/100
The Hindu
Hedges 5 of 8 claims Outlet record 60/100
The Independent
Hedges 4 of 13 claims Outlet record 59/100
How this article was measured signals, leaning charts, publisher record, byline, topics and claims

Signals How these are calculated →

Claims extracted
23
sentences that state something as happening or true
Uncertain
22%
5 of 23 hedged ("reportedly", "may", "according to")
Leaning
not political
takes no side on a contested political question
Publisher signals
59/100
Times of India's corrections and hedging, across everything collected from it. Not a measure of accuracy.
Outlets on this story
23
Crime & Law
Same framing elsewhere
1
articles that frame the event the way this one does
Analyzed 2026-09-23 · how these are computed

How this is being covered How these are calculated →

Article leaning vs. publisher reliability
Source leaning vs. consistency

Publisher

Times of India · 3737 article(s) · 2 correction(s) detected
Running correction rate · 2 correction(s)

Who wrote this

Prisha Patnaik
73 article(s) here · 1 carrying a prediction
🔮 Sylvia said he could not recall its precise contents and claimed he had deleted the message, believing he had accidentally erased the entire conversation thread.
🔮 The proposed partnership could make Canada the EU’s first “associate member”, bringing it closer to the bloc without formal membership.
🔮 Rezaei said last week that Iran would not negotiate with Washington until its core demands were met.
🔮 He also thanked US president Donald Trump and Argentine president Javier Milei for their support, portraying the United States as a place where his family could find the legal security he claimed was no longer available at home.
🔮 It would almost be funny if it weren’t such an appalling abuse of the Department of Justice, one that we cannot become numb to,” Comey said after the charges were made public.
🔮 We will now breathe freely,” Milica, a law student, told Reuters said as supporters celebrated in Belgrade.
🔮 I am thrilled to announce to you that our leader, my dear María Corina, is on Venezuelan soil,” he wrote, adding that he would return soon.
🔮 The 19-year-old transgender teen accused of plotting a racist mass shooting at a Hindu temple near Chicago will reportedly continue receiving hormone injections for gender transition while in jail awaiting trial, after a judge ordered his detention without bail.
🔮 North Korean premier Pak Thae Song said the bridge would help advance prosperity and improve people’s well-being, according to the countries’ state media.
🔮 The issue is reaching national politics, too, as politicians from both parties are facing pressure to explain how they would regulate the industry's growth, even as President Donald Trump has championed the expansion of artificial intelligence and criticised opposition to data centres.
Also by Prisha Patnaik
Nothing else under this byline is closely related to this article, so these are simply their most recent.
All 73 articles by Prisha Patnaik →

Topics

404 Media Axios FBI FBIjobs.gov ShinyHunters

Subjects

FBI ORG · 14× ShinyHunters ORG · 7× Axios ORG · 5× CNN ORG · 2× 404 Media ORG · 1× Allan Liska PERSON · 1× FBIjobs.gov ORG · 1× Oracle ORG · 1× PeopleSoft ORG · 1× Social Security ORG · 1×

Narrative

The FBI is investigating an apparent cyberattack on its job application website after the hacking group ShinyHunters claimed it stole more than 2 terabytes of data containing sensitive personal information about thousands of FBI employees and job applicants.
framing: mixed · carried by 1 article(s) · first seen 2026-09-23
🔮 However, Axios said it could not independently verify whether the stolen data was legitimate or current.

Claims (23 extracted, 5 hedged)

The FBI is investigating an apparent cyberattack on its job application website after the hacking group ShinyHunters claimed it stole more than 2 terabytes of data containing sensitive personal information about thousands of FBI employees and job applicants. asserted
it → investigate → employees
The bureau confirmed that it was investigating unauthorised activity affecting FBIjobs.gov, while the website’s Special Agent applicant portal was unavailable on Tuesday. asserted
portal → confirm → Tuesday
ShinyHunters claimed on its dark-web site that it had obtained “very sensitive data” on almost all FBI agents and people who had applied for jobs with the bureau. asserted
who → claim → bureau
The group also claimed it had accessed the FBI’s criminal justice, human resources and other systems. asserted
it → claim → justice
However, Axios said it could not independently verify whether the stolen data was legitimate or current. uncertain
data → say → ?
Cybersecurity researchers told the publication that the attack itself appeared legitimate, while 404 Media obtained a sample of the alleged stolen data that appeared to contain information on about 5,000 people identified as FBI agents. asserted
that → tell → agents
What hackers claim they stole According to Axios, ShinyHunters said the data included names, agent status, email addresses, phone numbers, home addresses and, in some cases, information about spouses, including Social Security numbers. uncertain
data → claim → numbers
The group also claimed it used a zero-day vulnerability in Oracle’s PeopleSoft platform to access and deface the FBI’s jobs website. asserted
it → claim → website
The site remained offline on Tuesday afternoon. asserted
site → remain → afternoon
Cybersecurity experts told Axios that the potential exposure could pose a long-term risk to FBI employees and their families if the information is circulated among other criminal groups or sold on the dark web. uncertain
information → tell → web
Allan Liska, a threat intelligence analyst at Recorded Future, told Axios that the data was likely to be repeatedly downloaded and shared with other threat actors if it had been obtained as claimed. asserted
it → tell → actors
Andrew Brandt, principal threat intelligence incident commander at Huntress, said the biggest concern was whether ShinyHunters would sell the information to criminal or state-sponsored hackers. asserted
ShinyHunters → say → hackers
Why did ShinyHunters target the FBI? asserted
ShinyHunters → target → FBI
The group claimed the attack was not financially motivated. asserted
attack → claim → ?
Instead, it demanded that the FBI retract or revise statements the bureau made about its activities. asserted
bureau → demand → activities
In a May advisory, the FBI warned that ShinyHunters commonly uses harassment tactics against victims and their families, including threatening calls and messages and, in some cases, swatting. uncertain
ShinyHunters → warn → cases
ShinyHunters disputed the FBI’s description, telling Axios that other “low-skilled threat actors” had been carrying out attacks while using the group’s name. asserted
actors → dispute → name
The FBI did not say whether it had confirmed the identity of the attackers or the extent of any data compromise. asserted
it → say → compromise
The incident comes as US law enforcement agencies face repeated cyberattacks. asserted
agencies → come → cyberattacks
CNN reported that the FBI investigated a separate suspected breach in March involving a sensitive network used to manage wiretaps and intelligence surveillance warrants. asserted
FBI → report → wiretaps
Last month, hackers also leaked files they allegedly stole from the Justice Department’s Bureau of Alcohol, Tobacco, Firearms and Explosives. uncertain
they → leak → Alcohol
CNN reported that the material appeared to contain sensitive information from past investigations. asserted
material → report → investigations
The FBI has also faced cyber incidents in the past, including a 2023 breach of a computer system used by its New York field office for child sexual exploitation investigations. asserted
FBI → face → investigations
💬Give feedback
🕘History 🎫Support