FBI Declares Cybersecurity Incident After Hackers Steal Agents' Personal Data
The FBI has declared a 'cyber security incident' after hackers stole personal data from its job application portal. The breach exposed sensitive information, including names, addresses, Social Security numbers, and medical records of agents and applicants. This marks the first public acknowledgment by the bureau that such data was taken in an attack claimed earlier by hacking group ShinyHunters. The attackers exploited a vulnerability in an Oracle PeopleSoft server used for human resources data. While they are not demanding ransom, they have asked the FBI to correct what they claim is misrepresentation of their activities in previous reports. Experts warn that this breach could lead to serious counterintelligence risks such as profiling and phishing attacks. It remains unclear whether Congress has been notified about the incident, which may be required under federal law if it meets criteria for a 'major incident.' This would mark the FBI's second data breach disclosure to lawmakers in 2026.
Tickers: $ORCL
Topics: data breach FBI Oracle PeopleSoft personal information theft