Cyber Attack on the FBI: Were Thousands of U.S. Employees' Data Stolen?

The United States Federal Bureau of Investigation (FBI) has opened an investigation after allegations of unauthorized activity in its job‑application systems. The cyber‑crime group ShinyHunters says it breached FBI systems and seized sensitive data belonging to thousands of employees. The FBI has not yet confirmed the scope of the attack.

Thousands of FBI Employees Targeted

ShinyHunters claimed in a message posted on the dark web that it had also seized data belonging to individuals who applied to the agency, in addition to FBI agents. The group said the stolen data contained personal information of FBI employees.

Are Sample Data of 5,000 People at Risk?

Investigations into the cyberattack reportedly uncovered a sample data set purported to contain information on about 5,000 people. The data included names, home addresses, phone numbers, and details about spouses of some FBI employees.

In a statement, the FBI said it was aware of the allegations of unauthorized activity affecting the FBIjobs.gov website and was investigating the matter. The agency did not confirm that the attack occurred or that all the alleged data had been extracted from FBI systems.

Reuters examined the alleged leaked personnel data—names and email addresses—by comparing them with credit bureau records and information from earlier data breaches. At least nine matches were found. However, Reuters could not determine that the source of these data was FBI systems.

FBI's Job Application Site Unavailable

At the time the attack allegations surfaced, it was observed that FBI's job application website and the 'Special Agent Applicant Portal' were inaccessible. Reuters, while independently verifying the site's status, reported that it could not determine whether this was directly linked to a cyberattack.

What is the Hacker Group's Request to the FBI?

ShinyHunters claimed that the attack was carried out in response to an announcement issued by the FBI about the group in May 2026. The group stated that it was demanding the FBI retract the warning concerning them.

Cybersecurity experts warned that if the allegations are verified, the exposure of FBI employees' personal data could have serious security ramifications. In particular, data such as home addresses and family information could be exploited by malicious actors. However, no definitive statement has yet been made regarding the true scope of the attack or the amount of data seized.

While ShinyHunters' claims are being moved onto the global cybersecurity agenda, the FBI's investigation continues.