Suspect Arrested in FBI Hack Exposing Employee Data

The FBI has arrested a suspect believed to be a co-conspirator in the cyberattack that exposed personal information of thousands of its employees, according to FBI Director Kash Patel. The group, identified as ShinyHunters, is thought to be responsible for the breach.

The hack, discovered in late September, targeted the FBI's job website, FBIJobs.gov, and compromised personnel records. The bureau confirmed that employee names, addresses, contact information, Social Security numbers, and dates of birth were obtained. The FBI is proceeding under the assumption that all employee personal information was compromised.

Federal Bureau of Investigation (FBI) Director Kash Patel testifies during a Senate Judiciary Committee hearing in the Hart Senate Office Building on September 15, 2026 in Washington, DC.

Win Mcnamee/Getty Images

Patel stated that the arrest "demonstrates the strength and reach of our efforts to protect Americans from cybercrime." Initially, the hacking group had threatened to release the sensitive data, but later recanted that threat.

On Monday, the FBI removed a third-party vendor managing the affected platform, citing a security failure. FBI Cyber Assistant Director Brett Leatherman explained that the incident occurred because a contractor failed to implement a critical security patch. The FBI has since taken steps to mitigate further risks and protect its workforce. The compromised system, FBIJobs.gov, was unclassified.

The bureau has issued a warning to potentially impacted employees, urging them to remain vigilant for suspicious calls and advising them not to answer them. Internal briefings are scheduled for employees affected by the breach. The FBI has also instructed employees not to speak with the media and to call 911 if approached by reporters.