Photo via NBC News

FBI investigating hacking group’s claim of massive breach of agent info

Read the original at NBC News ↗
Cite

Collier, K. (2026, September 23). FBI investigating hacking group’s claim of massive breach of agent info. NBC News. https://www.nbcnews.com/tech/security/fbi-investigating-hacking-groups-claim-massive-breach-agent-info-rcna599370

Dated when The Aporia collected the article, usually within hours of publication. Check the original for its exact date and byline.

NBC News · collected 2026-09-23 · by Kevin Collier

Quick Summary

The FBI is investigating claims made by the hacking group ShinyHunters that they have breached the FBI’s jobs portal and stolen between 2 and 3 terabytes of sensitive files, including personal information about agents. The alleged hack occurred in retaliation for a public service announcement against the group released by the FBI in May. While the extent of the breach remains unverified, cybersecurity expert Cynthia Kaiser warns that exposing such information could endanger FBI personnel and their families by providing criminals with details necessary to target or harm them physically.
Written by AI on 2026-09-23, from this article's own text only (the story summary below draws on all the coverage).

AI analysis

Story summary

ShinyHunters, a notorious hacking group, claimed on September 22 that they breached the FBIjobs.gov website and stole personal data from thousands of current and former FBI employees. The hackers obtained sensitive information such as names, home addresses, phone numbers, email addresses, and dates of birth for many agents and job applicants. ShinyHunters defaced the FBI's jobs portal with a mocking message that included President Trump’s signature phrase "Thank you for your attention to this matter," implying retaliation against his administration.

The FBI acknowledged unauthorized activity affecting their job application site but did not confirm the theft of data. Reuters partially verified some stolen information by cross-referencing it with credit bureau records and previous breaches, finding matches in at least nine cases. The hackers threatened further action if the FBI does not address what they see as false allegations against them.

The breach potentially impacted a significant number of individuals who applied for or held positions within the FBI since 2017 when the site became the primary application platform for agent and support roles. The full extent of data compromised remains unclear, but ShinyHunters shared what they claim is a small sample dataset involving approximately 5,000 individuals.

Written for “FBI Data Breach” on 2026-10-31, grounded in this article and the 22 other(s) covering the same event.

Story

📰 FBI Data Breach
Crime & Law · 23 article(s) covering the same event. Compare every outlet's account →

Compared with similar articles

This article reads unscored and hedges 36% of its claims. Each row says how that neighbour differs.
The Straits Times
Hedges 6 of 21 claims Outlet record 66/100
The Guardian
Hedges 5 of 12 claims Outlet record 66/100
Times of India
Hedges 5 of 23 claims Outlet record 59/100
The Hindu
Hedges 5 of 8 claims Outlet record 60/100
The Independent
Hedges 4 of 13 claims Outlet record 59/100
Daily Mail
Hedges 4 of 20 claims Outlet record 68/100
The Sydney Morning Herald
Hedges 8 of 29 claims Outlet record 61/100
ABC News (AU)
Hedges 7 of 22 claims Outlet record 68/100
CBS News
Hedges 10 of 30 claims Outlet record 66/100
The Straits Times
Hedges 7 of 29 claims Outlet record 66/100
How this article was measured signals, leaning charts, publisher record, byline, topics and claims

Signals How these are calculated →

Claims extracted
25
sentences that state something as happening or true
Uncertain
36%
9 of 25 hedged ("reportedly", "may", "according to")
Leaning
not political
takes no side on a contested political question
Publisher signals
60/100
NBC News's corrections and hedging, across everything collected from it. Not a measure of accuracy.
Outlets on this story
23
Crime & Law
Same framing elsewhere
1
articles that frame the event the way this one does
Analyzed 2026-09-23 · how these are computed

How this is being covered How these are calculated →

Article leaning vs. publisher reliability
Source leaning vs. consistency

Publisher

NBC News · 1944 article(s) · 1 correction(s) detected
Running correction rate · 1 correction(s)

Who wrote this

Kevin Collier
5 article(s) here · 1 carrying a prediction
🔮 One day after governments around the world warned that newly publicized software vulnerabilities were so severe that websites should consider going offline until they could fix it, experts and insiders say there are few, if any, reports of widespread damage.
🔮 Several websites were temporarily down as of Wednesday morning, citing fear that hackers could take them over.
🔮 DiscoverTech is one of a number of companies that help brands show their advertisements on websites that may be visited by potential customers.
🔮 In a post on its website viewed by NBC News, ShinyHunters said the alleged hack was retaliation for a public service announcement about the group that the FBI posted in May.
🔮 The researchers, from a small company called Hacktron, found that by chaining together two unknown vulnerabilities, one in a third-party company called Discourse and one in how OpenAI validates its employees, they could access employees’ ChatGPT accounts.
Also by Kevin Collier
Nothing else under this byline is closely related to this article, so these are simply their most recent.

Topics

FBI FBIJobs.gov Halcyon NBC News ShinyHunters

Subjects

FBI ORG · 16× ShinyHunters ORG · 7× NBC News ORG · 4× FBIJobs.gov ORG · 3× Kaiser ORG · 3× U.S. GPE · 2× Anthropic ORG · 1× Cynthia Kaiser PERSON · 1× Halcyon GPE · 1×

Narrative

The hacking group, ShinyHunters, a cyber-extortion outfit that routinely hacks companies to steal their data and threatens to publish it on the dark web if not paid, said Wednesday that it had hacked into the FBI’s jobs portal and used that access to steal a major tranche of sensitive files, including ones that detail individual agents’ personal information.
framing: mixed · carried by 1 article(s) · first seen 2026-09-23
🔮 In a post on its website viewed by NBC News, ShinyHunters said the alleged hack was retaliation for a public service announcement about the group that the FBI posted in May.

Claims (25 extracted, 9 hedged)

The FBI said Wednesday that it is investigating a notorious hacking group over its claims to have stolen data on agents. uncertain
it → say → agents
“The FBI is aware of a cyber-criminal enterprise group claiming a compromise of the FBIJobs.gov portal and alleged impact to FBI employee personally identifiable information (PII),” the FBI said in a statement. asserted
FBI → claim → statement
“While the point of breach is still undetermined — whether a third-party or the FBI’s enterprise — we are actively and aggressively investigating this matter and working closely with those third-party providers that support FBIJobs.gov to mitigate any and all risk.” asserted
that → investigate → risk
The hacking group, ShinyHunters, a cyber-extortion outfit that routinely hacks companies to steal their data and threatens to publish it on the dark web if not paid, said Wednesday that it had hacked into the FBI’s jobs portal and used that access to steal a major tranche of sensitive files, including ones that detail individual agents’ personal information. asserted
that → hack → information
In a post on its website viewed by NBC News, ShinyHunters said the alleged hack was retaliation for a public service announcement about the group that the FBI posted in May. uncertain
FBI → view → May
“We were very disappointed to see an agency of your standing would resort to such circulation of disinformation in an attempt to ‘disrupt’ our operations, an effort that ultimately proved unsuccessful,” it said. asserted
it → disappoint → operations
It disagreed with the FBI’s characterizations in its PSA and said it would publish hacked data in a week if the PSA was not retracted. asserted
PSA → disagree → week
A representative of the group claimed to NBC News that they hacked the FBI’s job portal Monday and then gained access to other agency programs, stealing between 2 and 3 terabytes of files. asserted
they → claim → files
NBC News was not able to verify the extent of their claims. uncertain
News → verify → claims
An agency spokesperson said: “The FBI is aware of claims regarding unauthorized activity affecting FBIjobs.gov and is currently investigating.” uncertain
FBI → say → FBIjobs.gov
Cynthia Kaiser, the former deputy cyber director of the FBI and a senior vice president at the cybersecurity company Halcyon, told NBC News that the alleged breach was worrying, as exposing personal information on FBI agents, who often sign their names to court documents used to prosecute criminals, endangers them. asserted
who → tell → them
“This type of information could be used by criminals to target or physically harm FBI agents, personnel and their families,” Kaiser said. uncertain
Kaiser → use → agents
“So I get concerned when you start thinking about physical addresses, who people’s spouses are, all of that.” asserted
spouses → get → that
Kaiser said that ShinyHunters was unlikely to be outright lying about its access but that like most cybercriminal extortionists, it tends to exaggerate its claims. uncertain
it → say → claims
“You often see a mixture of truth and lies when you’re dealing with threat actors like this,” she said. asserted
she → see → this
“They’re trying to show people, ‘Look what I have. asserted
I → try → what
You’re so scared of what I might show next, so you should do exactly what I should tell you to do, right?’” uncertain
I → ’re → you
ShinyHunters is a loosely defined group, with members scattered around the globe. asserted
members → define → globe
AI company Anthropic released one clue about its operations in a threat intelligence report earlier this month, when it said it had since December repeatedly disrupted clusters of ShinyHunters affiliates trying to use the company’s AI in their hacking operations. asserted
it → release → operations
While some cybercriminals can operate with relative impunity in countries that do not extradite to the U.S., the FBI does regularly arrest cybercriminals directly or with the help of law enforcement in countries friendly to the U.S. Antagonizing the FBI might tempt the agency to make more of an effort to arrest ShinyHunters members, Kaiser said. uncertain
Kaiser → operate → members
“That’s normally a recipe for a takedown. asserted
That → ’ → takedown
There’s going to be more resources against them,” she said. asserted
she → go → them
The ShinyHunters spokesperson said it was aware of that risk. asserted
it → say → risk
“We have been working on this since the release of the FBI FLASH report they made on us in May. uncertain
they → work → May
This was well planned and coordinated,” the spokesperson said. asserted
spokesperson → plan → ?
💬Give feedback
🕘History 🎫Support