FBI investigates alleged compromise of its jobs portal
The FBI is examining alleged unauthorized activity at FBIjobs.gov after ShinyHunters claimed it obtained personnel data.
By James Whitfield · Staff Writer
3 min read
The FBI says it is investigating alleged unauthorized activity affecting its recruitment site, a FBI jobs portal breach that a hacking group says exposed sensitive information. The agency has not confirmed that its systems were breached or validated the group’s claims about the records involved.
In a statement reported September 23 by Al Jazeera, the FBI said it knew of a cybercriminal group’s claim that FBIjobs.gov had been compromised and that employee personally identifiable information may have been affected. The bureau said it was working with companies that support the site while it examined the incident.
What has the FBI confirmed about the alleged FBIjobs.gov breach?
The confirmed development is the investigation. The FBI said it had not established where the alleged intrusion occurred, leaving open whether it involved a third-party provider or the FBI’s own systems, according to Al Jazeera.
The agency’s jobs website was unavailable during the reporting period. Politico reported that the site displayed a system-unavailable notice on September 22, while CNN said the Special Agent Applicant Portal was unavailable that day. Al Jazeera reported the portal remained offline Wednesday afternoon.
That distinction is central: an outage and an inquiry do not establish how access was obtained, what information may have been taken, or how many people may be affected.
What ShinyHunters says it obtained
ShinyHunters has claimed responsibility and said it obtained “very sensitive” information on FBI agents and job applicants, Politico reported. The group’s assertions, including its estimate of the number of people affected, have not been confirmed by the FBI.
Politico reported that ShinyHunters gave 404 Media a sample it said involved 5,000 FBI agents. According to that report, the purported sample contained names, home addresses, telephone numbers and information about spouses. Reuters, as reported by Al Jazeera, said it had seen portions of purported data that included detailed job-assignment information for some bureau officials. Neither account establishes the authenticity or full extent of the alleged data.
Two people familiar with the matter told Politico that investigators regarded the claims as credible. They said exposure of personnel identifiers could be used to harass or threaten agents and their families, and could interest foreign intelligence services or criminal groups. The FBI has not publicly confirmed those assessments.
How did hackers say they accessed the data?
The route into the system also remains unresolved. Politico reported that investigators were examining whether an Oracle PeopleSoft vulnerability could have been involved, but said they had not determined whether that was the method used. ShinyHunters did not publicly identify the systems or databases it said it accessed.
The group said its action was intended to make the FBI remove or revise a May public advisory about ShinyHunters, according to Politico and CNN. CNN reported that the group said it was not financially motivated in this case; that motive has not been independently verified.
In its May advisory, the FBI warned that threat actors may use genuine or exaggerated claims of access to sensitive information to pressure victims, Al Jazeera reported. The current inquiry is ongoing, and the agency has not said whether any information was accessed or removed.
This story draws on original reporting from Al Jazeera.