As cited
Copy frozen at (site build).
breaches incidents
ShinyHunters tells The Reg: We hacked the FBI to 'protect our business'
ShinyHunters, a data theft and extortion group, breached the FBI's FBIJobs.gov portal using an Oracle PeopleSoft zero-day vulnerability and stole personnel files containing home addresses, phone numbers, Social Security numbers, and other sensitive information belonging to current, former, and prospective FBI employees. The group told The Register the hack was a public relations effort to refute an FBI bulletin alleging harassment tactics and false claims, asserting it demonstrates their technical credibility to potential victims they plan to extort. The PeopleSoft vulnerability remains unpatched, and ShinyHunters indicated the same flaw could compromise other organizations' human resources systems.
Why it matters: FBI employees and job applicants face identity theft and targeted harassment risks from stolen personal data; organizations using Oracle PeopleSoft in similar configurations need to assess exposure to the unpatched zero-day and consider compensating controls immediately.
- Source published
- First seen by Cybersecurity Tracker
Source attribution
Correction
Correction recorded as of .
breaches incidents
ShinyHunters tells The Reg: We hacked the FBI to 'protect our business'
ShinyHunters, a data theft and extortion group, breached the FBI's FBIJobs.gov portal using an Oracle PeopleSoft zero-day vulnerability and stole personnel files containing home addresses, phone numbers, Social Security numbers, and other sensitive information belonging to current, former, and prospective FBI employees. The group told The Register the hack was a public relations effort to refute an FBI bulletin alleging harassment tactics and false claims, asserting it demonstrates their technical credibility to potential victims they plan to extort. The PeopleSoft vulnerability remains unpatched, and ShinyHunters indicated the same flaw could compromise other organizations' human resources systems.
Why it matters: FBI employees and job applicants face identity theft and targeted harassment risks from stolen personal data; organizations using Oracle PeopleSoft in similar configurations need to assess exposure to the unpatched zero-day and consider compensating controls immediately.
- Source published
- First seen by Cybersecurity Tracker