FBI Investigates Alleged Breach of Its Own Jobs Website by ShinyHunters

The FBI has confirmed it is investigating a security incident affecting FBIjobs.gov after the cybercriminal group ShinyHunters defaced the site, replacing agency imagery with its own mascot, and claimed to have stolen data on current and former FBI employees and job applicants. The site's special agent application portal remained unavailable as of Wednesday morning.

ShinyHunters provided samples of around 5,000 stolen FBI agent records to media outlets, which reportedly confirmed their authenticity. The group's leak site post was largely a rebuttal to an FBI public service announcement issued in May, which followed ShinyHunters' attack on education software company Instructure, an incident that disrupted thousands of schools and universities and reportedly led to a ransom payment. ShinyHunters denied engaging in swatting, family threats, or sextortion, and denied being part of a broader hacking collective known as The Com.

The FBI has not responded to further questions about the scope or validity of the claims. This incident highlights how even law enforcement agencies remain targets for data theft and public defacement campaigns, and underscores the reputational and operational risks such breaches pose regardless of the size or authority of the organisation involved.