ShinyHunters Claims It Hacked the FBI, Stole Data on Every Employee
'We hacked the FBI:' Hackers say they have data on all FBI employees
ShinyHunters says it breached FBI-related services and stole names, home addresses, phone numbers, and spouse details for all FBI employees and applicants. It provided a 5,000-person sample, and 404 Media verified some phone numbers matched DOJ personnel. The group defaced the FBI jobs site, claims it used an Oracle PeopleSoft zero-day to reach AWS GovCloud, and says it exfiltrated 2–3 terabytes. It denies financial motive, calling its plan 'coercion.'
We hacked the FBI. We hold data on all FBI employees and applicants.
- jacobgold
At this point, no one seems capable of keeping a large database safe. I assume all medical and biographical information that exists is in the hands of the major state actors.
China hacked 22.1 million records of US government employees:
https://en.wikipedia.org/wiki/2015_Office_of_Personnel_Manag...
- reactordev
There’s a scene in Battlestar Galactica (2004) where someone asks Captain Adama why the Galactica doesn’t have networked computers. So the cylons can’t hack the ship…
- rdtsc
> When asked if ShinyHunters was going to attempt to extort the FBI, the representative said, “what we plan to do is not something I’d call extortion, maybe coercion... This is not financially motivated,” they added
They should try something like "100 agents at noon on Sep 23 do the chicken dance for 30 min in the middle of the street in DC, then we'll consider not releasing the info and not sell it to the Chinese".
- tencentshill
Well that's a big one.
Perhaps firing expertise and hiring incompetents wasn't a good idea.
- 1970-01-01
If this was 1992, we'd be retelling and celebrating the hack for decades.
1992 was 33 years ago; this is almost an unremarkable event. It will be superseded by whatever happens in AI news by the end of the month.
- TutleCpt
404 Media is doing a much better job at breaking major stories than mainstream media. Nice.
- corvad
Looks like it was an Oracle PeopleSoft 0-day so I imagine there are a lot more systems vulnerable.
- wesleyd
Data: don't collect it; don't store it; don't keep it!