FBI probes jobs portal breach that exposed agents’ personal data

The incident raises counterintelligence and privacy concerns as the FBI weighs whether to classify it as a major breach reportable to Congress.

The FBI has internally acknowledged that a cyberattack on its FBIJobs.gov application portal exposed personal data on agents, staff and applicants, elevating it to a “cyber security incident.” Attackers reportedly accessed names, addresses, job titles, Social Security numbers and in some cases medical and psychiatric records, raising significant counterintelligence and privacy concerns. The hacking group ShinyHunters claims it exploited a vulnerability in an Oracle PeopleSoft server backing the portal and says it obtained data on most FBI personnel and many applicants. Instead of demanding money, the group is reportedly pressing the FBI to amend a prior report that they say mischaracterized their activities. The bureau is now evaluating whether this breach qualifies as a “major incident” that must be reported to Congress, which would mark its second such notification this year, while the FBIJobs.gov site remains offline.