Source Details

{
    "source_type": "extension",
    "content_hash": "912403baff6797de5b7606459f13f2bf13027c952176f65573ec5491356c571b",
    "submitted_via": "chrome_extension",
    "extension_version": "1.0.18",
    "original_url": "https:\/\/www.nytimes.com\/2026\/09\/23\/us\/politics\/fbi-hack-shinyhunters-data.html?emc=edit_na_20260923&nl=breaking-news&segment_id=226953",
    "parsed_content": "Trump AdministrationN.I.H. GrantsGreenland DealDefense of A.I.Voting by MailApproval RatingAdvertisementSKIP ADVERTISEMENTSupported bySKIP ADVERTISEMENTHackers Say They Stole Thousands of Sensitive F.B.I. Personnel RecordsThe compromise, if confirmed, would be the latest in a string of cybersecurity failures at the F.B.I., which said it was investigating the matter.Listen \u00b7 7:45 min Share full articleA prolific criminal hacking group said it had stolen the data from an online jobs portal for the F.B.I.Credit...Tierney L. Cross\/The New York TimesBy Dustin VolzDustin Volz covers cybersecurity and intelligence and has reported extensively on multiple major hacks of sensitive data at the F.B.I. He reported from Washington.Sept. 23, 2026Updated 2:07 p.m. ETSee more of our coverage in your search results.Encuentra m\u00e1s de nuestra cobertura en los resultados de b\u00fasqueda. Add The New York Times on GoogleAgrega The New York Times en Google A prolific criminal hacking group said Tuesday that it had stolen a large tranche of sensitive personnel information belonging to thousands of F.B.I. officials in what would amount to a stunning breach of private data for the nation\u2019s top law enforcement agency.The hackers, who call themselves ShinyHunters, said the records were stolen from an online jobs portal for the bureau and included names of current and former agents as well as applicants and corresponding home addresses, phone numbers, names of spouses, certain medical information and other data. The group does not appear to have yet leaked any of the data publicly.\u201cWe have compromised the FBI,\u201d the group said in a message posted online that was addressed to the F.B.I. director, Kash Patel, and Brett Leatherman, who oversees the bureau\u2019s cybersecurity division. \u201cWe hold very sensitive data on almost ALL FBI Agents and individuals who filed an application with the FBI for a job.\u201dIn its message, ShinyHunters said it had targeted the F.B.I. as retribution for a public advisory the bureau issued in the spring warning about the group\u2019s tactics. The group demanded the F.B.I. \u201ccorrect or simply REMOVE\u201d the advisory, which said ShinyHunters was known to harass victims and family members with threatening or coercive maneuvers, and do so within a week or risk further consequences.AdvertisementSKIP ADVERTISEMENTAn F.B.I. spokeswoman acknowledged the breach, saying that the bureau was aware of the claims and that it was investigating. In a statement, the bureau said, \u201cWhile the point of breach is still undetermined \u2014 whether a third-party or the F.B.I.\u2019s enterprise \u2014 we are actively and aggressively investigating this matter and working closely with those third-party providers that support FBIJobs.gov to mitigate any and all risk.\u201dThe jobs website remained inaccessible Wednesday morning after its homepage a day earlier featured a banner that read, \u201cTHIS SITE HAS BEEN SEIZED BY SHINYHUNTERS.\u201dIn an exchange with The New York Times, ShinyHunters described the personnel records it had, stating they concerned the private information of tens of thousands of people. News of the apparent hacking was reported earlier by 404 Media, an online cybersecurity and technology news publication.Current and former F.B.I. officials and cybersecurity experts who track criminal groups said that the breach appeared authentic and that it amounted to a potentially devastating security lapse and counterintelligence danger for the bureau. Among other concerns, the personnel information of F.B.I. officials, if posted on the dark web, could be acquired by foreign intelligence agencies in China, Russia or elsewhere and weaponized for espionage operations.ImageKash Patel, the F.B.I. director, had his personal emails hacked and leaked in March by a pro-Iranian group.Credit...Tierney L. Cross\/The New York Times\u201cIf true, this data breach is a reminder that no one is immune from cyberthreats and, unfortunately, it raises serious public safety and counterintelligence risks,\u201d said Sumon Dantiki, a partner at the law firm Baker McKenzie and former senior F.B.I. and Justice Department official who worked on cybersecurity issues.AdvertisementSKIP ADVERTISEMENTA more tangible concern is that the data could also be a road map for violent criminals to seek retribution against the F.B.I. agents who put them behind bars, said Cynthia Kaiser, a former senior F.B.I. official who oversaw major cyberinvestigations. F.B.I. agents sign their names to court paperwork submitted against criminal suspects but are generally trained to avoid letting sensitive personal information, such as home addresses or familial ties, easily surface online.Sign up for the On Politics newsletter. It's a pivotal moment for American politics. Join us for 2026 and beyond. Get it sent to your inbox.\u201cWhat worries me most is how any criminal with a grudge could use this data to target and physically harm not only the F.B.I. agents who investigated them, but also those agents\u2019 families,\u201d Ms. Kaiser said.ShinyHunters is a well-known hacking collective that has been active for years and has claimed a string of major headline-grabbing breaches, though security researchers say the group has at times exaggerated or misrepresented its actions. It credibly takes responsibility for several notable hacks, however.In May, it said it had compromised an online learning system called Canvas that is used by thousands of schools and universities around the world, which led to the spring F.B.I. advisory. The group also said it was behind attacks against Ticketmaster in 2024, which the hackers said had compromised the user information of more than 500 million customers.AdvertisementSKIP ADVERTISEMENTThe apparent F.B.I. breach called to mind the vast theft more than a decade ago of about 20 million government employee and contractor records from the Office of Personnel Management. That heist, which the Obama administration blamed on the Chinese government, is still considered one of the worst cybersecurity failures on record in the United States. As a result, government agencies strove to better protect and disaggregate sensitive data in an attempt to avoid future thefts of such richly detailed databases.Given the O.P.M. debacle, former F.B.I. officials said they were stunned to learn that such valuable \u2014 and voluminous \u2014 private information about bureau personnel appeared to be held in an online database tied to a jobs portal.The ShinyHunters breach would be just the latest in a recent string of cybersecurity lapses for the F.B.I. Earlier this year, the bureau identified what it believed were Chinese hackers inside a database it maintains on its domestic surveillance orders. That discovery was especially alarming because Beijing appeared to be building on a catastrophic infiltration of the F.B.I.\u2019s internal network used to process and maintain domestic wiretaps on criminal suspects, which was part of a far-reaching espionage campaign that officials first disclosed in 2024 that infiltrated U.S. telecommunications infrastructure.Mr. Patel, too, had his personal emails hacked and leaked in March by a pro-Iranian hacktivist group associated with the country\u2019s Ministry of Intelligence and Security.In the most recent episode, ShinyHunters said it had weaponized a zero-day, or previously undiscovered, computer bug within the Oracle PeopleSoft software, an application that companies use for human resources and financial management. The group declined to answer specific questions about the apparent flaw, saying in an email that \u201cwe intend to utilise the zero-day for our businesses\u2019 normal operations.\u201d Oracle did not respond to a request for comment.AdvertisementSKIP ADVERTISEMENTIt was not clear what ShinyHunters, which said it had made off with two to three terabytes of data in total, intended to do should the F.B.I. not retract its advisory about the group. Flashpoint, a cybersecurity company in the United States, said it expected the hackers would likely follow their playbook against corporate victims and soon leak the stolen data online.\u201cWe cannot comment on what we will do if the F.B.I. does not comply with our request,\u201d ShinyHunters said in its email to The Times. \u201cWe reiterate we are not extorting the F.B.I. and this is NOT financially motivated.\u201dThe hackers added: \u201cOur intention, goal and motive is solely to set the record straight.\u201dTawnell D. Hobbs contributed reporting.AdvertisementSKIP ADVERTISEMENT",
    "published_at": "2026-09-23T16:38:54+00:00",
    "author_name": "Dustin Volz",
    "site_name": "The New York Times",
    "section": "US Politics",
    "publisher": "The New York Times Company",
    "ai_headline": "Hackers Say They Stole Thousands of Sensitive F.B.I. Personnel Records",
    "ai_simplified_title": "ShinyHunters Steal FBI Personnel Records September 2026",
    "ai_excerpt": "A criminal hacking group, ShinyHunters, claims to have stolen sensitive personnel information from an F.B.I. jobs portal, including names, addresses, and medical data of agents and applicants. The F.B.I. is investigating the alleged breach, which could pose significant security and counterintelligence risks.",
    "ai_subject_tags": [
        "Cybersecurity",
        "Data Breach",
        "FBI",
        "ShinyHunters",
        "Hacking",
        "National Security",
        "Law Enforcement"
    ],
    "ai_context_type": "News",
    "ai_context_details": {
        "tone": "informative",
        "perspective": "neutral",
        "audience": "general",
        "credibility_indicators": [
            "expert_quotes",
            "official_statements",
            "named_journalists"
        ]
    },
    "ai_source_vector": null,
    "ai_confidence_score": 0.9999999999999999,
    "ai_extraction_metadata": {
        "extracted_at": "2026-09-25T04:05:34.212718Z",
        "ai_model": "gemini-2.5-flash",
        "extraction_method": "automated",
        "content_length": 8510,
        "metadata_prompt_body_chars": 8510,
        "metadata_prompt_truncated": false,
        "url": "https:\/\/nytimes.com\/2026\/09\/23\/us\/politics\/fbi-hack-shinyhunters-data.html",
        "existing_metadata": {
            "author_name": null,
            "published_at": null,
            "domain_name": "nytimes.com",
            "site_name": null,
            "section": null,
            "publisher": null
        },
        "openai_refusal_gemini_fallback": false
    }
}

{
    "extracted_at": "2026-09-25T04:05:34.212718Z",
    "ai_model": "gemini-2.5-flash",
    "extraction_method": "automated",
    "content_length": 8510,
    "metadata_prompt_body_chars": 8510,
    "metadata_prompt_truncated": false,
    "url": "https:\/\/nytimes.com\/2026\/09\/23\/us\/politics\/fbi-hack-shinyhunters-data.html",
    "existing_metadata": {
        "author_name": null,
        "published_at": null,
        "domain_name": "nytimes.com",
        "site_name": null,
        "section": null,
        "publisher": null
    },
    "openai_refusal_gemini_fallback": false
}