Hacking group ShinyHunters claims it breached the FBI, stole agents’ and applicants’ data
- ID
- 27352
- Status
- summarized
- Published
- 23 Sep 2026, 2:40 AM
- Fetched
- 23 Sep 2026, 2:56 AM
- Provider
- TechCrunch
- Category
- technology
- Original URL
- https://techcrunch.com/2026/09/22/hacking-group-shinyhunters-claims-it-breached-the-fbi-stole-agents-and-applicants-data/
- Source URL
- https://techcrunch.com/feed/
Summary
- Score
- 4.0
- Created
- 23 Sep 2026, 2:58 AM
- Tags
- Audience
- developerssaas_founders
What happened
ShinyHunters claims to have breached the FBI by exploiting an Oracle PeopleSoft HR server, then pivoting into an Amazon-hosted government cloud to steal terabytes of data on thousands of agents and applicants. 404 Media verified a sample of stolen names, addresses, and phone numbers; the hackers say the attack is not financially motivated but aimed at forcing the FBI to retract a report about the group.
Why it matters
The attack path—compromising an HR application (PeopleSoft) and lateral-moving into a cloud environment—is a pattern any builder running SaaS or internal HR tools should recognize. If you operate cloud-hosted systems with sensitive PII, this reinforces the need to segment HR/application servers from broader cloud infrastructure rather than trusting the same perimeter.
Discussion angle
How a single application-layer compromise (PeopleSoft) became a gateway to an entire cloud data store—and what network segmentation or zero-trust controls would have stopped the pivot.