FBI Probes Breach of Jobs Portal as Hackers Claim Employee Data

The FBI is working to determine whether a breach involving its jobs website originated within the bureau or through a third-party provider after a criminal hacking group claimed it obtained personal information belonging to FBI employees.

In a statement posted Thursday on X, the bureau said it is aware of a cyber-criminal enterprise group claiming a compromise of the FBIJobs.gov portal and an alleged impact to FBI employee personally identifiable information. «While the point of breach is still undetermined — whether a third-party or the FBI's enterprise — we are actively and aggressively investigating this matter and working closely with those third-party providers that support FBIJobs.gov to mitigate any and all risk,» the FBI said.

The ShinyHunters hacking and extortion group has taken responsibility for the breach, saying it stole information belonging to nearly all FBI agents and people who applied to work for the bureau. A sample of the data shared with Reuters contained agents' names, home addresses, Social Security numbers, assignments and, in some cases, the names of family members.

Jason Pack, CEO of Media Rep Global Strategies and a retired FBI supervisory special agent, said the distinction between a personnel data breach and access to the bureau's classified systems is critical as investigators work to establish the scope of the incident. «There is a meaningful difference between somebody obtaining personnel information and somebody gaining access to classified investigative systems,» he said. «Based on what we know right now, there is no indication they have the keys to the kingdom.»

Pack said combining personal information with details about an FBI employee's work could create additional security risks. «If an adversary knows who somebody is, where they work and what they do, they can build a much more believable scam around that person,» he said.

He also noted that assignment information could carry counterintelligence implications if it were to fall into the hands of a foreign intelligence service. «If a foreign intelligence service can associate particular people with certain assignments, it can help them identify individuals they may want to learn more about, approach or potentially assess for recruitment,» he said. «That does not mean that is happening here. It simply explains why assignment information can have value to an adversary.»

Pack stressed that the hackers' claims remain separate from what the FBI has confirmed, and that the bureau still needs to determine what information was accessed, how the breach occurred and who may have been affected. He added that the danger from stolen personal information does not necessarily end when a computer vulnerability is fixed, because criminals may hold onto the data and use it weeks or months later.

The FBI said it is continuing to work with the third-party providers that support FBIJobs.gov as investigators seek to determine the source of the breach and mitigate potential risks. The bureau has not confirmed the hackers' claims about the scale of the data theft, and no determination has been made about whether the breach originated inside the FBI or through an outside vendor.

6Views

Author

Delaney Sawyer

Society Reporter

Delaney Sawyer covers public affairs, politics, business, culture and daily news for Core Memo. The role focuses on verification, context, and clear explanations for readers.

All articles by this author