The FBI is investigating ShinyHunters’ claim that it stole employees’ personal information in an attack targeting FBIJobs.gov; the bureau has not determined whether the breach originated inside the FBI or with a third-party provider and says it is working to mitigate risks.
ShinyHunters said it took data belonging to nearly all FBI agents and job applicants, Reuters reported. A sample shared with Reuters reportedly contained agents’ names, home addresses, Social Security numbers and assignments, plus family members’ names in some cases. The FBI has not confirmed what information, if any, was accessed.
Retired FBI supervisory special agent Jason Pack said there was no indication, based on what was known at the time, that hackers had accessed classified investigative systems. He warned that combining personal details with work assignments could make scams more convincing; in a foreign intelligence service’s hands, assignment data could help identify people to approach or assess for recruitment. He stressed that this did not mean such activity was happening.
