Hackers Claim a File on FBI Employees and Applicants: What FBI Staff Should Do Now

A hacking group claims it has stolen data on FBI employees and people who applied for FBI jobs, and it is using that claim to pressure the Bureau. The FBI says it is investigating. Much of what the hackers say has not been verified, but FBI employees, applicants, and their families should take a few protective steps now rather than wait for confirmation.

What the Hackers Claim, and What Has Been Confirmed

The group, ShinyHunters, says it has data on nearly every FBI agent and applicant. According to Nextgov/FCW reporting on September 22, reporters received a file that appears to contain personal information on nearly 5,000 FBI employees, including details about their spouses and siblings. Reporters confirmed that some names in the file belong to real FBI employees. The full data set, and the group's account of how it got in, have not been independently verified.

The group claims it gained access through a previously unknown flaw in Oracle's PeopleSoft software. One cybersecurity expert has said that, if that claim is true, other systems could be at risk as well.

A Pressure Campaign Aimed at an FBI Warning

In May, the FBI issued a public warning about this group's tactics, describing how it threatens victims and their families and, in some cases, “swats” them. The group denies that. Now it is demanding that the FBI pull or correct that warning within a week.

In other words, the group is pressuring the FBI to take back a warning about how it pressures people, while holding a file on FBI personnel. The same FBI warning also notes that the group may exaggerate what it has. That is a reason to stay calm and careful, not a reason to ignore the threat.

What FBI Employees and Applicants Should Do Now

If you work for the FBI or have ever applied to work there, you do not need to wait for confirmation to protect yourself:

• Freeze your credit at all three major credit bureaus. A credit freeze is free, and you can lift it when you need to.
• Give your family a heads-up. The file reportedly includes information about spouses and siblings, and they did not sign up for this.
• If anyone contacts you claiming to have your data, do not engage. Report it to your security office.
• Treat unexpected messages about “your compromised data” with suspicion, and verify anything through official channels.

Why This Matters Beyond the FBI

Many federal employees remember receiving breach letters after the 2015 OPM data breach. Every agency holds sensitive personnel information on its workforce and applicants, and a breach at one agency is a reminder to check your own protections, including whether you are still enrolled in any identity-protection coverage you were offered.

It is also fair to ask what an agency owes its people when their information is exposed. Those who signed up to serve, and their families who never did, deserve clear, confirmed information and real support.

If a data exposure or its fallout is affecting your job or your security clearance, the attorneys for federal employees at Southworth PC represent federal employees nationwide and worldwide.

Legal Disclaimer: This content is for general informational purposes only and does not constitute legal advice. Federal employment situations are fact-specific and time-sensitive. Please consult a qualified federal employment attorney about your specific situation. You can contact Southworth PC at attorneysforfederalemployees.com.