ShinyHunters Breached FBI Jobs Website
The hacker group ShinyHunters claimed responsibility for a breach of the FBI jobs website and stolen applicant data.
Updated on Sept. 23, 2026 in Cybersecurity
Live Poll
Do you trust the government to keep sensitive personal information secure from cyberattacks?
The hacker group ShinyHunters has claimed responsibility for breaching the FBI jobs website, leading to the temporary suspension of online application portals. The group alleges that it stole data belonging to FBI agents and job applicants during the attack.
Why it matters
The group is attempting to coerce the FBI into removing or amending a public service announcement from May that linked the hackers to other cyberattacks. By targeting the agency, the hackers are challenging federal warnings against their activities.
The attackers issued a one-week deadline for the FBI to address their demands following the breach of the apply.fbijobs.gov portal. The site and the Special Agent Application Portal remain inaccessible to the public.
The players
ShinyHunters
This is a hacker group known for targeting major corporate entities and cloud environments to steal and leak sensitive data.
FBI
The Federal Bureau of Investigation is the domestic intelligence and security service of the United States.
The details
ShinyHunters, which has previously targeted companies like Snowflake and Salesforce, gained access by exploiting cloud environment vulnerabilities or using social engineering. The hackers posted their demands and evidence of the breach on their own data-leak site after defacing the FBI jobs portal.
Timeline
The FBI issued a public service announcement regarding the group in May 2026.
The FBI jobs site was breached on Monday, September 21, 2026.
The Tech Race
This incident highlights the ongoing escalation between federal cybersecurity authorities and prolific data-extortion groups. The attack marks a shift from private sector targeting to direct confrontation with national security institutions.
Individuals who recently applied for FBI positions may face delays or potential data privacy risks due to the portal suspension. Users should monitor their personal accounts for suspicious activity if they submitted credentials to the site before the breach.
The takeaway
This breach demonstrates the persistence of ransomware groups in retaliating against law enforcement efforts. Users and organizations should continue to implement multi-factor authentication and monitor for signs of social engineering in their professional networks.
What happens next
The hackers have issued a one-week deadline for the FBI to respond, which expires on September 28, 2026.
Further reading
Learn more about evolving digital threats by visiting the Cybersecurity section.
Live Poll
Do you trust the government to keep sensitive personal information secure from cyberattacks?
