Breaches and incidentsBriefReported by a reputable outlet, citing the company
FBI jobs portal breach claimed by ShinyHunters; arrests follow
ShinyHunters announced on 22 Sep that it breached the FBI’s jobs site.
- Disclosed
What happened
- ShinyHunters announced on 22 Sep that it breached the FBI’s jobs site. FBI Cyber Division AD Brett Leatherman said it was “a security failure of a platform managed by a third-party organization” and the FBI “has removed the contractor”. Samples confirmed employee home addresses and SSNs; ShinyHunters claims 2 to 3 TB.
- Technique: Reuters sources say a missed patch on an Oracle PeopleSoft HR platform run by an Accenture contractor (Accenture did not confirm); ShinyHunters claims a PeopleSoft zero-day and movement into AWS GovCloud (unverified).
- Attribution: ShinyHunters claimed; FBI statement appears to accept it.
- Response: Dutch police arrested a 24-year-old (“Umbreon”) on 15 Sep (ShinyHunters denies he is a member); “Rey” detained in Jordan and reportedly cooperating; a Canadian alleged co-conspirator arrested in Pennsylvania (announced 9 Oct).
Sources
- https://www.nbcnews.com/politics/justice-department/fbi-hack-jobs-website-contractor-failure-rcna601928
- https://www.securityweek.com/fbi-blames-contractors-missed-patch-for-shinyhunters-breach/
- https://www.bleepingcomputer.com/news/security/fbi-arrests-another-suspected-shinyhunters-hacker-after-agency-breach/
This is a brief: a short, sourced summary from our incident tracking. Full advisories add commands to check whether you are affected.