ShinyHunters claimed to have obtained data from FBI systems

ShinyHunters, known in the cybercrime world for large-scale data theft and blackmail attacks, claimed that it received terabytes of data from FBI-owned systems. It was claimed that the sample data shared by the group contained the names, phone numbers, home addresses, dates of birth and, in some cases, family information, belonging to thousands of FBI employees.

The authenticity of all of the data in question and the scope of the attack have not yet been independently verified. Therefore, it is unknown to what extent the incident affected the FBI's central systems or whether sensitive investigation files were compromised by the attackers.

WHO IS SHINYHUNTERS?

ShinyHunters is known as a cybercriminal organization that has come to the fore with numerous large-scale data breaches since approximately 2020.

US authorities have previously linked the group to stealing user and customer data by infiltrating company networks, then offering that information for sale on underground forums or soliciting money from companies.

The group's name has also come to the fore in recent years with data breaches affecting large companies such as Ticketmaster, AT&T and Santander. ShinyHunters is known to exploit social engineering methods based on deceiving employees, stolen user information, and security vulnerabilities in third-party services used by companies.

The U.S. Department of Justice has previously conducted investigations against individuals associated with ShinyHunters activities. Some individuals associated with the group's operations were tried and convicted in the United States.

The FBI also identified ShinyHunters as a cybercriminal group linked to large-scale data theft and blackmail attacks in a cybersecurity alert published this year.

The FBI HAS BEEN TARGETED BEFORE

The FBI's computer systems have been subject to various cyber attacks in the past.

In 2021, attackers took advantage of a security vulnerability in a server used by the FBI and sent thousands of fake cyber attack alerts from the agency's official email addresses. The FBI later announced that the attack did not gain access to the main corporate email system.

In 2023, a cyber security incident occurred in a computer network connected to the FBI's New York field office. While the office announced that the incident was under control, details about the scope of the attack were shared with the public in a limited way.

There have been incidents where data regarding FBI employees was leaked to the internet before. In 2016, a data set consisting of the names, job titles, phone numbers and e-mail addresses of approximately 20 thousand FBI employees was published on the internet.

It is stated that if the latest ShinyHunters claim is confirmed, the attack may go beyond just targeting a website or e-mail system and turn into a serious security breach that includes the seizure of extensive personal data of FBI personnel.

However, until official confirmation comes from the FBI, ShinyHunters' statements remain allegations.