# FBI declares cybersecurity incident after hackers steal agents' personal data Hackers accessed sensitive FBI personnel data through a vulnerability in the agency's job application portal. - **Source:** [cybersecurity | TechCrunch](https://brifing.si/source/73fbb25c-5e90-44c9-9a24-7906dc3436cd) - **Published:** 2026-09-28 - **Topic:** [Software & Engineering](https://brifing.si/c/engineering) - **Original article:** - **On Brifing:** https://brifing.si/s/a6e6cd7f-0218-4732-93b0-2a17ce95578b ## FBI confirms data breach The FBI has informed its agents and support staff that their personal information was stolen in a cyberattack targeting the bureau's job application portal. This marks the first acknowledgment that agents' data was compromised. The breach exposed names, addresses, job titles, and Social Security numbers of FBI personnel through the FBIJobs.gov portal, which has been the primary application method since 2017. ## Hackers' access method The hacking group ShinyHunters exploited a vulnerability in an Oracle PeopleSoft server hosting HR information. This server contained extensive data on current employees and applicants. The group claims to possess data on 'mostly all of FBI' and a substantial amount of applicant information. Unlike typical cyberattacks, they're not seeking ransom but demanding correction of an FBI report about their activities. ## Sensitive medical data exposed Beyond standard personal information, multiple media outlets confirmed the stolen data included highly sensitive medical records. These contained blood and urine sample results along with psychiatric reports - particularly concerning for agents engaged in undercover or sensitive operations. The exposure of such data significantly increases risks of profiling and targeting by foreign entities. ## National security implications Security expert Justin Sherman labeled the breach a 'counterintelligence disaster,' warning it exposes thousands of FBI personnel to profiling, phishing, and foreign intelligence approaches. The stolen data could compromise ongoing investigations and reveal surveillance targets. This follows another breach earlier this year where Chinese hackers accessed an FBI surveillance system, exposing investigation targets. ## Legal reporting requirements Federal law requires Congress notification when breaches meet 'major incident' criteria - defined as theft of personally identifiable information likely to harm national security. The FBI hasn't confirmed if it notified lawmakers, suggesting legal teams are still assessing the breach's severity. This would be the bureau's second major breach disclosure to Congress this year if required. ## Operational impact The FBIJobs.gov portal remains offline following the breach, disrupting the bureau's primary recruitment channel. With the portal down since the attack, the FBI faces operational challenges in hiring and processing new applicants. The extended downtime suggests significant remediation efforts are underway to secure the system before reopening. ## Hackers' unusual demands Unlike typical cybercriminals seeking financial gain, ShinyHunters demanded the FBI correct what they claim is a misrepresentation of their activities in an official report. This suggests ideological or reputational motives rather than financial ones. The group's focus on forcing an institutional acknowledgment indicates sophisticated understanding of government operations. ## Long-term security concerns The breach exposes systemic vulnerabilities in government HR systems handling sensitive personnel data. With both current employee and applicant information compromised, the incident may force reevaluation of security protocols across federal agencies. The exposure of medical and psychiatric records creates unprecedented risks for agents' operational security and personal safety. ## Sources covering this story - https://techcrunch.com/2026/09/28/fbi-reportedly-declares-cyber-security-incident-after-hackers-steal-agents-personal-data/ — --- _Summary written by Brifing from the original reporting. Copyright in the original article belongs to its publisher; read the full piece at the link above._