AI Weekly Malaysia

TechCrunch reports the FBI sent staff an internal notification declaring a "cyber security incident" after hackers stole personal data — names, addresses, job titles, and Social Security numbers — from the FBIJobs.gov application portal. The ShinyHunters group claims it exploited a vulnerability in an Oracle PeopleSoft server hosting HR data, and outlets have since confirmed stolen medical records including blood and urine samples and psychiatric reports. The group says it is not seeking a financial ransom but is demanding correction of an earlier claim.

Why: Oracle PeopleSoft is common HR/ERP infrastructure, so the concrete lesson here is that an internet-facing HR portal can leak SSNs plus medical and psychiatric records in one hit. If you run or integrate PeopleSoft (or any HR app holding applicant data), the decision to make now is whether that portal needs to be publicly reachable at all, and whether you even need to retain applicant medical data after rejection. Note the ransom posture: this group reportedly skipped a cash demand, so paying-ransom playbooks and 'we'll just restore from backup' assumptions do not map to this incident.