The FBI says it is investigating a reported breach of its strategy aft a cybercrime radical claimed to person stolen delicate accusation connected thousands of bureau personnel.
The hackers, Shiny Hunters, accidental they present clasp backstage information connected each the bureau unit - astir 38,000 radical - including anyone who applied to articulation the investigative agency.
The radical says it has each agent's name, role, badge fig and idiosyncratic details including location address, telephone numbers and spouse information.
In a connection posted connected X, the FBI said it was alert of the assertion and the bureau was "actively and aggressively investigating the matter".
The criminals assertion to person breached the FBI's servers connected Monday nighttime and began contacting reporters connected Tuesday sharing samples and screenshots of the stolen data.
The BBC has seen a tiny information of the information which appears to beryllium genuine.
According to Reuters, immoderate of the information contains details astir officials' job assignments, including delicate enactment against Chinese spies, Russian quality and cause cartels.
ShinyHunters is an planetary corporate of hackers, believed to person primitively started successful France. It has been down a fig of high-profile breaches including connected Rockstar Games successful April and a highly disruptive hack connected acquisition level Canvas successful May.
The radical claims to person recovered a vulnerability successful the Oracle unreality retention strategy utilized by the FBI to breach aggregate systems including FBIJOBS, FBI BEAST, which does inheritance checks connected employees and applicants, FBI MedLink, which holds agent's aesculapian records and FBI BICS, which holds probe information.
In its connection connected the acheronian web, the radical said it did not hack the FBI strategy for money.
Instead, the cybercriminals are asking the bureau to retract an advisory that it issued successful May astir the gang, saying it was "offended" by its characterisation.
That FBI's public work announcement, external described ShinyHunters arsenic "threat actors" who often "use their existent oregon exaggerated claims of entree to delicate oregon idiosyncratic accusation to punctual outgo from victims".
"They people large companies crossed tech, finance, and retail, often stealing millions of lawsuit records astatine once," the advisory said.
ShinyHunters said it would springiness the bureau 1 week to close oregon region what it says are mendacious allegations oregon they would people the afloat databases.
The FBI did not respond to aggregate requests for remark from the BBC.
In its connection connected X, the bureau said it was trying to find whether oregon not the hackers had breached its systems oregon a 3rd party.
"We are actively and aggressively investigating this substance and moving intimately with those third-party providers that enactment FBIJobs.gov to mitigate immoderate and each risk," the station said.
In a connection to the BBC, a cybersecurity adept said it was a "retaliation attack", which demonstrated that "no organisation is harmless from the group".
"The radical intelligibly wants to power the communicative astir their activities, ensuring thing is said that could dent their reputation," said William Wright of Closed Door Security.
Meanwhile Andrew Brandt of cyber-security steadfast Huntress said it whitethorn provoke the FBI to way down and prosecute members of the hacking group.
"ShinyHunters indispensable consciousness beauteous assured they won't get caught to endanger a authorities bureau similar this," helium said.
English (US)·