ShinyHunters claims FBI jobs site breach via PeopleSoft flaw; bureau probes "unauthorized activity"
The hacker group ShinyHunters says it broke into the FBI’s recruitment site FBIjobs.gov and stole data on agents and job applicants, allegedly using a zero‑day vulnerability in PeopleSoft software. The FBI confirms it’s investigating claims of unauthorized activity affecting the portal.
A hacker group is claiming to have breached the FBI’s online hiring system, drawing attention to the security of government recruitment platforms.
ShinyHunters says it broke into FBIjobs.gov, the bureau’s recruitment portal, and stole data on FBI agents and job applicants. The group also claims it used a previously unknown software flaw, a so‑called zero‑day, in PeopleSoft, an Oracle platform widely used for human‑resources systems. No public technical details of the alleged vulnerability are available.
The FBI has said it is investigating claims of "unauthorized activity" affecting FBIjobs.gov. It has not confirmed that data was stolen, identified the attacker or described the scale of any breach.
If ShinyHunters’ account is borne out, the data at risk would likely include personal and professional information submitted by applicants and potentially some details on existing staff, given the purpose of the site. That kind of information—contact details, work history, education—can be valuable for both criminal and state‑linked actors seeking to target individuals.
The mention of a PeopleSoft zero‑day also concerns other organizations, because the same software underpins HR and recruitment systems in many government agencies and large companies. Until more is known about the flaw, defenders have limited concrete indicators to work with.
The FBI’s investigation, any subsequent public confirmation of data theft, and possible advisories or patches from Oracle or security researchers will show whether this is an isolated claim or the first sign of a wider vulnerability being exploited.
Sources
- OSINT