ShinyHunters says it stole data on 5,000 FBI agents
ShinyHunters claims it stole data on 5,000 FBI agents
ShinyHunters, a hacking group known for stealing data and demanding cryptocurrency ransoms, says it broke into an FBI database and took the personal details of 5,000 agents.
The group shared a sample of the data with several news outlets on September 22, 2026. According to the reports, the sample includes information about family members, social security numbers and details of assignments.
The claim has not been confirmed in full by the FBI. Reuters said it was able to partially verify some of the data in the sample and matched it with other agents, including FBI director Kash Patel.
Key details of the claim
- ShinyHunters says the stolen records cover 5,000 FBI agents.
- The group shared a sample of the data with multiple outlets on September 22, 2026.
- Reuters said it partially verified part of the sample.
- ShinyHunters also defaced the FBI's job page with a picture of the Pokémon Umbreon.
How the FBI says the attackers got in
An FBI spokesman told 404media that ShinyHunters gained access to AWS GovCloud servers through a zero-day exploit in Oracle's PeopleSoft product. A zero-day exploit is a software flaw that the maker does not yet know about or has not yet fixed.
ShinyHunters says the attack was retaliation
The group told outlets that the data theft was a response to an FBI report published in May 2026 that described the group's activities and methods. ShinyHunters claims the FBI made false allegations in that report and says it has given the agency one week to correct or remove it.
The group told 404media the theft was not "financially motivated," adding: "What we plan to do is not extortion, maybe coercion."
A history of data theft and crypto ransoms
ShinyHunters is described as an international hacking group known for stealing sensitive data and holding it for ransom in exchange for large amounts of cryptocurrency.
In 2024, the group extorted the telephone company AT&T after stealing data belonging to almost all of its 109 million customers. AT&T eventually met the ransom demand and paid almost six bitcoin, worth $373,646 at the time.
In January 2026, ShinyHunters claimed it stole user data from the dating apps Hinge, Match and OKCupid. Four French men were arrested in connection with the group in May 2026, but it has continued to operate.
What is confirmed
ShinyHunters says it stole the data, and that claim was reported by several outlets. Reuters stated that it was able to partially verify part of the leaked sample. The FBI's jobs page was defaced, and an FBI spokesman gave 404media an account of how the attackers got in.
What is still unclear
The FBI has not confirmed that the records of 5,000 agents were stolen in full. Only part of the sample has been verified by an outside news organization. It is also not clear what the agency will do about the group's one-week demand or whether more data will be released.
Sources
Newisty Editorial Team covers technology, cryptocurrency, digital products, online platforms, developer tools and the wider digital economy. Our content is researched from official sources, company announcements, public documentation, market data and other primary or reputable sources. Articles are reviewed and edited before publication for clarity, accuracy and useful context.