Story perspectives

FBI Investigates ShinyHunters Claim of 2–3TB Breach

By Drooid · Sep 24, 2026, 3:11 AM UTC · How we work

Summary

Story summary

The FBI is investigating a claimed breach of its jobs portal by ShinyHunters.
ShinyHunters said it exploited a zero-day Oracle PeopleSoft flaw on September 22, 2026.
The group claimed to have taken 2–3 TB of data from FBI-hosted AWS GovCloud servers.
ShinyHunters posted a sample of about 5,000 records containing names, addresses, phones and SSNs.
Reuters verified at least ten of those records, including Director Kash Patel, against credit-bureau and dark-web data.

History

Historical Context

In April 2015 Chinese hackers from the Jiangsu State Security Department breached the Office of Personnel Management, exfiltrating about 22.1 million security-clearance records and later revealing 5.6 million stolen fingerprints. That intrusion spurred extensive federal security reforms. The alleged September 2026 PeopleSoft zero-day attack on the FBI’s AWS GovCloud, claimed by ShinyHunters, revives concerns about persistent cloud vulnerabilities.

1 of 2

Story summary

The FBI is investigating a claimed breach of its jobs portal by ShinyHunters.
ShinyHunters said it exploited a zero-day Oracle PeopleSoft flaw on September 22, 2026.
The group claimed to have taken 2–3 TB of data from FBI-hosted AWS GovCloud servers.
ShinyHunters posted a sample of about 5,000 records containing names, addresses, phones and SSNs.
Reuters verified at least ten of those records, including Director Kash Patel, against credit-bureau and dark-web data.

1 / 2