The FBI is currently scrutinizing allegations from a cybercriminal group known as ShinyHunters, claiming to have obtained sensitive personal information about approximately 38,000 bureau employees. The group asserts they possess comprehensive details including each agent’s name, role, badge number, and personal information such as home addresses and phone numbers.
Professor Ciaran Martin, the former leader of the UK’s National Cyber Security Centre, described the incident as “as serious as it gets when it comes to data breaches,” should the claims be validated.
In a statement released on X, the FBI acknowledged awareness of the claims and announced that the agency is “actively and aggressively investigating the matter.”
Allegedly, the hackers breached the FBI’s servers late Monday night, initiating contact with reporters the following Tuesday to share samples and screenshots of the purportedly stolen data.
The BBC has reviewed a small segment of the information and indicated that it appears to be authentic. According to Reuters, some of the data includes details related to officials’ roles, including operations against threats from Chinese and Russian intelligence, as well as drug cartels.
ShinyHunters is an international hacking collective believed to have originated in France, recognized for several major breaches, including an incident involving Rockstar Games in April and a disruptive attack on the education platform Canvas in May.
The group claims to have exploited a vulnerability in the Oracle cloud storage solution utilized by the FBI, enabling them to infiltrate multiple systems, notably FBIJobs, FBI BEAST which handles background checks, FBI MedLink managing agents’ medical records, and FBI BICS that stores investigative information.
In their communication on the dark web, the hackers asserted their motivation was not financial. Instead, they demanded the FBI retract a May advisory illustrating the group as “threat actors” that utilize claims of access to sensitive information to extort victims.
The FBI’s advisory characterized ShinyHunters as a group targeting major companies across technology, finance, and retail sectors, often resulting in the theft of millions of customer records.
ShinyHunters has set a one-week deadline for the FBI to correct or remove what they deem false allegations, threatening to release the entirety of the databases if their demands are not met.
Despite multiple inquiries from the BBC, the FBI has not responded. The agency did confirm its efforts to ascertain whether the hackers accessed its systems or a third-party platform.
The FBI’s statement emphasized their ongoing investigation and collaboration with third-party providers associated with FBIJobs.gov to mitigate potential risks.
A cyber-security expert remarked that this incident appears to be a “retaliation attack,” implying no entity is immune to the group’s activities. William Wright from Closed Door Security mentioned that the group wants to maintain a positive narrative surrounding their actions.
Furthermore, Andrew Brandt from Huntress suggested this situation might compel the FBI to pursue legal action against members of the hacking group, highlighting their confidence in evading capture.
Editor’s Take
This incident underscores the escalating confrontations between cybercriminals and government agencies, raising significant concerns over data privacy and security. The implications for users and institutions are profound, as such breaches can undermine public trust. The FBI’s response and the ongoing investigation will be crucial in determining the necessary steps to enhance cybersecurity protections.
Source: www.bbc.co.uk
