FBI Investigates Potential Data Breach on Jobs Portal, Source of Compromise Unknown

The FBI is working to determine the origin of a potential data breach affecting its jobs website, FBIJobs.gov. The investigation is underway after a hacking group known as ShinyHunters claimed responsibility for accessing personal information of FBI employees and job applicants.

The bureau acknowledged the claims in a statement Thursday, stating that the point of breach is still undetermined, whether it originated internally or through a third-party provider. "The FBI is aware of a cyber-criminal enterprise group claiming a compromise of the FBIJobs.gov portal and alleged impact to FBI employee personally identifiable information (PII)," the FBI said in an X post. "While the point of breach is still undetermined — whether a third-party or the FBI’s enterprise — we are actively and aggressively investigating this matter and working closely with those third-party providers that support FBIJobs.gov to mitigate any and all risk."

ShinyHunters has alleged that it obtained names, home addresses, Social Security numbers, assignments, and in some cases, the names of family members for nearly all FBI agents and applicants. A sample of data shared with Reuters purportedly contained these details.

Jason Pack, CEO of Media Rep Global Strategies and a retired FBI supervisory special agent, emphasized the critical distinction between access to personnel data and classified systems. "There is a meaningful difference between somebody obtaining personnel information and somebody gaining access to classified investigative systems," Pack told Fox News Digital. "Based on what we know right now, there is no indication they have the keys to the kingdom."

Pack explained that while the breach may not have compromised classified information, the combination of personal details with an FBI employee's work assignments could still pose security risks. "If an adversary knows who somebody is, where they work and what they do, they can build a much more believable scam around that person," he said. He also noted a potential counterintelligence concern if foreign intelligence services were to obtain assignment information, as it could help them identify individuals for further investigation or recruitment.

The FBI stated it is collaborating with third-party providers that support the FBIJobs.gov portal to ascertain the source of the breach and to mitigate any associated risks. Pack cautioned that the danger from stolen personal information can persist even after a vulnerability is fixed, as criminals may retain and use the data later.