Shiny Hunters breaches FBI portal and steals personnel files
- Extortion gang Shiny Hunters breached an FBI job portal and stole sensitive agent personnel records.
- Stolen files map foreign intelligence desks and expose personal details of agents and their families.
- The group dropped its publishing threat after Dutch police arrested an alleged ringleader in the Netherlands.
A zero-day exploit just dismantled decades of FBI cover.
Cybercriminals exploited a zero-day flaw in an Oracle PeopleSoft tool powering a government job portal. As reported on September 30, 2026, by cybersecurity journalist Dustin Volz on The Daily, the intruders extracted personnel files containing full names, home addresses, phone numbers, and emergency contact details for active and former FBI employees.
The fallout extends far beyond standard administrative paperwork. The compromised dataset explicitly maps out internal bureau reporting chains and reveals specific personnel assigned to sensitive foreign intelligence desks, including operations covering China and Russia. It also detailed private information about agents' spouses and children, directly compromising families who routinely rely on total anonymity for protection.
This was not the work of foreign state actors.
Instead, a loose syndicate of youth extortionists known as Shiny Hunters orchestrated the intrusion. Speaking to Volz on The Daily after providing sample files, the group claimed they targeted the bureau to retaliate against a recent federal public warning that accused their syndicate of widespread harassment and swatting attacks. They demanded a full public retraction from the agency under threat of releasing the full database.
The extortion scheme unraveled rapidly as law enforcement moved in. Dutch National Police arrested a 24-year-old alleged leader of the group in the Netherlands, prompting Shiny Hunters to suddenly cancel their scheduled leak. Despite backing down from a public release, the hackers never returned or destroyed the stolen records.
That leaves critical federal data circulating in underground markets. Federal agencies now face the uncomfortable reality that foreign intelligence services could quietly purchase the leaked database, effectively unmasking undercover operatives worldwide without firing a single shot.
The identity of federal agents remains exposed.