The FBI has instructed employees to work on the assumption that hackers obtained their personal information in a breach involving FBIjobs.gov, according to an internal memo reported by Reuters and covered by Decrypt.
The warning applies broadly across the bureau. ShinyHunters, the group claiming responsibility, says it accessed information on nearly all FBI agents, people who applied for jobs with the bureau and some applicants’ spouses. The alleged haul could total between 2 and 3 terabytes, including names, telephone numbers, home addresses and, in some cases, details relating to spouses.
The FBI has not confirmed either the size of the alleged theft or the group’s account of how the intrusion happened. It says the incident remains under investigation. Even so, the bureau’s internal guidance reflects the potential seriousness of the exposure: employees are being told to behave as if their information is already in the attackers’ possession.
What the hackers claim to have taken
ShinyHunters says the intrusion began on Monday night and that visitors to FBIjobs.gov saw a message on Tuesday, Sept. 22, saying the website had been seized by the group. The site is associated with recruitment, meaning the alleged records could include information belonging to people who never joined the FBI.
The group has said it exploited a previously unknown vulnerability in Oracle’s PeopleSoft software, which is used by many organizations for human-resources operations. A previously unknown software flaw is commonly called a zero-day vulnerability because the vendor has had no time to issue a fix. The FBI has not verified that PeopleSoft was the entry point.
ShinyHunters linked its claims to a May 15 FBI advisory. That notice warned that the group uses harassment against victims, including threats involving family members and, in some cases, “swatting”—a false emergency report intended to send armed police to a person’s address.
The hackers denied the warning and gave the bureau one week to retract it. That deadline has now passed. ShinyHunters later described the ultimatum as a marketing campaign and said it does not intend to publish the allegedly stolen data.
The internal memo nonetheless tells FBI personnel to prepare for virtual briefings and to remain alert for suspicious calls or text messages from unknown numbers. The concern is not limited to online privacy. If home addresses and family information were released, employees and relatives could face harassment, threats, identity theft or physical danger.
FBI response and ShinyHunters’ background
FBI Cyber Division chief Brett Leatherman addressed the group publicly on Sept. 29, after the one-week period ended. Referring to the arrest of a person in the Netherlands on Sept. 15, Leatherman said authorities know how to find the hackers and urged them to contact the FBI while they still had a choice. ShinyHunters has said the arrested man was not connected to the group.
ShinyHunters has operated in cybercrime circles since emerging in 2020, when it became known for selling stolen databases on hacker forums. It also helped operate BreachForums, a prominent forum for trading stolen information. Last year, the group claimed to possess approximately 1.5 billion records taken from customers of Salesforce, a widely used customer-data platform.
The FBI’s warning illustrates why personal information can create risks even when no financial account is directly compromised. Names, phone numbers and addresses can be used to target individuals, pressure relatives or support impersonation and identity-theft attempts. The possibility of physical intimidation has also been highlighted by incidents in the cryptocurrency sector.
Coinbase previously said bribed support agents had leaked customer information, after which the company faced a $20 million extortion demand. In France, 135 crypto-related “wrench attacks” had been recorded since 2023 as of April, with 88 suspects charged. In one reported case, attackers who assaulted a couple outside their apartment in Nancy obtained information from a January breach at Waltio, a French crypto-tax platform that exposed data on about 50,000 users.
The FBI has not said how many people were affected by the FBIjobs.gov incident. For now, the bureau’s position is precautionary: employees should assume their information may have been stolen, while investigators work to establish what happened and what data, if any, was accessed.
Current market picture
Moneyiar market data at 09:29 and 09:28 on Oct. 1, 2026, showed mixed performance among the two tracked assets:
- Telcoin (TEL): $0.0022187154, down 1.61% over 24 hours and up 31.49% over seven days.
- Data Network (DATA): $0.2144249336, down 1.35% over 24 hours and down 1.86% over seven days.
These figures are Moneyiar data at the stated times and describe market movements; they do not indicate any connection between the assets and the FBI incident.
