Photo via NBC News

FBI says contractor failure led to hack of its jobs website

Read the original at NBC News ↗
Cite

Gregorian, D. (2026, October 6). FBI says contractor failure led to hack of its jobs website. NBC News. https://www.nbcnews.com/politics/justice-department/fbi-hack-jobs-website-contractor-failure-rcna601928

Dated when The Aporia collected the article, usually within hours of publication. Check the original for its exact date and byline.

NBC News · collected 2026-10-06 · by Dareh Gregorian

Quick Summary

The FBI has concluded that a contractor’s failure to implement a security patch led to the hack of its jobs portal last month, according to an internal review. Assistant Director Brett Leatherman stated that the FBIJobs.gov breach allowed cyber-extortion group ShinyHunters access to between 2 and 3 terabytes of files, though this claim was not independently verified by NBC News. The FBI has since removed the contractor from the project and arrested one member of ShinyHunters in coordination with Dutch authorities on September 15.
Written by AI on 2026-10-06, from this article's own text only (the story summary below draws on all the coverage).

AI analysis

Story summary

FBI removed an Accenture contractor on October 5 following a data breach that exposed sensitive information of thousands of bureau employees, according to sources familiar with the matter. The breach occurred due to a failure by the contractor to implement a security patch for Oracle’s PeopleSoft human resources platform. FBI Cyber Division Assistant Director Brett Leatherman stated in a press release that the incident resulted from a security lapse managed by a third-party organization after the contractor neglected critical system updates, leading to unauthorized access and data theft of between 2 to 3 terabytes. The agency has taken steps to mitigate further risks and protect its workforce while also initiating legal actions against those responsible.

Written for “FBI Data Breach Incident” on 2026-11-02, grounded in this article and the 1 other(s) covering the same event.

Story

📰 FBI Data Breach Incident
Crime & Law · 2 article(s) covering the same event. See how they differ ↓

Compared with similar articles

This article reads unscored and hedges 12% of its claims. Each row says how that neighbour differs.
CBS News
Hedges 4 of 12 claims Outlet record 66/100
“Article A discusses the detention of a ShinyHunters member and their cooperation with FBI, while Article B addresses the cause of the FBI's jobs website hack due to a contractor's failure.”
The Straits Times
Hedges 1 of 11 claims Outlet record 66/100
Toronto Star
Hedges 0 of 2 claims Outlet record 64/100
“Article A describes the initial security failure and contractor removal, while Article B reports an arrest related to the hack, which is a subsequent action rather than the same specific incident.”
Fox News
Hedges 1 of 15 claims Outlet record 69/100
“Article A discusses the initial security failure and contractor breach, while Article B reports on an arrest of a suspected co-conspirator related to the hack, indicating they describe different phases or aspects of the same broader incident.”
ABC News (US)
Hedges 5 of 15 claims Outlet record 70/100
“The articles describe different stages of a broader incident: one discusses the cause and contractor failure, while the other reports an arrest related to the hack.”
How this article was measured signals, leaning charts, publisher record, byline, topics and claims

Signals How these are calculated →

Claims extracted
16
sentences that state something as happening or true
Uncertain
12%
2 of 16 hedged ("reportedly", "may", "according to")
Leaning
not political
takes no side on a contested political question
Publisher signals
60/100
NBC News's corrections and hedging, across everything collected from it. Not a measure of accuracy.
Outlets on this story
2
Crime & Law
Same framing elsewhere
1
articles that frame the event the way this one does
Analyzed 2026-10-06 · how these are computed

How this is being covered How these are calculated →

Article leaning vs. publisher reliability
Source leaning vs. consistency

Publisher

NBC News · 2001 article(s) · 1 correction(s) detected
Running correction rate · 1 correction(s)

Who wrote this

Dareh Gregorian
13 article(s) here · 1 carrying a prediction
🔮 It included a typewritten note depicting an imaginary conversation with Epstein, who would later be charged with sex trafficking.
🔮 Witt said he was unhappy with the assignment, in part because “I had concerns that this would be viewed as political.”
🔮 “If Plaintiff’s last-minute request for relief were granted, either party could create chaos for their own political purposes to disrupt the election process.”
🔮 Prosecutor John Borchert of the U.S. attorney’s office for Washington, D.C., acknowledged in court Tuesday that “this has never been done before” but suggested the complaint could be signed during the hearing.
🔮 “It could be that the grand jury just made the wrong decision,” he said then, referring broadly to failed indictments.
🔮 The Trump administration’s assertion that it can fire career prosecutors at will would “unsettle the very equilibrium established by this Nation’s constitutional system,” the judge wrote.
🔮 Trump, an avid golfer, said the renovation would begin “on November 15th, when the old Course will be closed to play.”
🔮 “She has been a wonderful asset to the team, and we wish her well.”
🔮 “Just as Camp David, Windsor Palace or the Elysee Palace are known worldwide, so too will the Presidential Golf Course in Palm Beach County,” Harvey Oyer wrote in the letter last month, which was first reported by The Palm Beach Post.
🔮 We will continue to bring the responsible parties to justice, with multiple arrests already occurring.
Also by Dareh Gregorian
Nothing else under this byline is closely related to this article, so these are simply their most recent.
All 13 articles by Dareh Gregorian →

Topics

FBI FBIJobs.gov NBC News ShinyHunters WASHINGTON

Subjects

FBI ORG · 7× ShinyHunters ORG · 6× FBIJobs.gov ORG · 2× NBC News ORG · 2× @FBI ORG · 1× Brett Leatherman PERSON · 1× Cyber Division ORG · 1× Kash Patel PERSON · 1× Leatherman ORG · 1× WASHINGTON GPE · 1×

Narrative

“To date, our review has determined that the incident occurred as the result of a security failure of a platform managed by a third-party organization — after a contractor failed to implement a security patch explicitly issued to secure the platform,” Cyber Division Assistant Director Brett Leatherman said in a statement Tuesday.
framing: assertive · carried by 1 article(s) · first seen 2026-10-06
🔮 We will continue to bring the responsible parties to justice, with multiple arrests already occurring.
2026-10-06 · NBC News
FBI says contractor failure led to hack of its jobs website · assertive framing

Claims (16 extracted, 2 hedged)

The FBI’s internal review of a hack of its jobs portal last month has so far determined that a “security failure” by a contractor managing the site caused the breach. asserted
failure → determine → breach
“To date, our review has determined that the incident occurred as the result of a security failure of a platform managed by a third-party organization — after a contractor failed to implement a security patch explicitly issued to secure the platform,” Cyber Division Assistant Director Brett Leatherman said in a statement Tuesday. asserted
Leatherman → determine → statement
The statement said the FBI has removed the contractor, which it did not identify, “and taken all necessary steps to both mitigate any further risk and protect our workforce. asserted
it → say → workforce
We will continue to bring the responsible parties to justice, with multiple arrests already occurring. asserted
arrests → continue → justice
The hack of the FBIJobs.gov portal took place late last month, and ShinyHunters, a cyber-extortion outfit, claimed credit for it. asserted
ShinyHunters → take → it
A representative of the group told NBC News at the time that it used the job portal to gain access to other agency programs, stealing between 2 and 3 terabytes of files. asserted
it → tell → files
NBC News was not able to verify the extent of the claims. uncertain
News → verify → claims
Leatherman’s statement appeared to confirm that the agency believes ShinyHunters is responsible. asserted
ShinyHunters → appear → ?
“The FBI will aggressively investigate this cyber incident involving FBIjobs.gov and the cyber-criminal group ShinyHunters with all available resources,” his statement said. asserted
statement → investigate → resources
FBI Director Kash Patel announced on social media last week that a member of the group had been arrested. asserted
member → announce → group
The arrest took place on Sept. 15, a week before ShinyHunters claimed credit for the attack. asserted
ShinyHunters → take → attack
“This morning @FBI and our partners the Dutch National Police are announcing the arrest of one of the alleged leaders of ShinyHunters — a global cybercrime and threat actor group linked to cyberattacks in the United States, the Netherlands, and around the world,” he wrote. asserted
he → announce → world
“As we speak FBI teams are actively working with partners to obtain and execute more leads in the ongoing investigation based on this arrest,” his post on X said. asserted
post → speak → X
Some FBI employees were upset to have learned about the hack from the media and said the agency had been slow to respond, a person familiar with the agency’s communications said last week. asserted
person → upset → communications
The FBI had said in a previous statement that is “in regular communication with anyone who may be impacted,” and that the agency “treats the security of its information and the safety of its workforce as top priorities.” ShinyHunters is a loosely defined group, with members scattered around the globe. uncertain
members → say → globe
It routinely hacks companies to steal their data and threatens to publish it on the dark web if not paid. asserted
It → hack → web
💬Give feedback
🕘History 🎫Support