The Plain Record

Neutral daily news — clear headlines, complete facts.

Legal

FBI investigates hacking group's claim of data breach at jobs website

The FBI is investigating claims by the hacking group ShinyHunters that it stole data from the recruitment portal, FBIJobs.gov.

Published September 23, 2026 at 6:45 PM EDT

The short answer

The FBI is investigating claims by the hacking group ShinyHunters that it stole data from the recruitment portal, FBIJobs.gov. The FBI announced on Wednesday, September 23, 2026, that it is investigating a claim by a cybercriminal group that it breached the FBIJobs.gov portal and compromised personal information of employees.

FBI investigates hacking group's claim of data breach at jobs website

The Facts

Who
The FBI and the hacking group ShinyHunters.
What
FBI investigation into a hacking group's claim that it breached a jobs portal and stole employee data.
When
Wednesday, September 23, 2026
Where
Washington, D.C.
Why
The group claims to have stolen 2 to 3 terabytes of sensitive data in retaliation for an FBI public service announcement.

The FBI announced on Wednesday, September 23, 2026, that it is investigating a claim by a cybercriminal group that it breached the FBIJobs.gov portal and compromised personal information of employees. The hacking group, known as ShinyHunters, stated it gained access to the recruitment website and threatened to release the data publicly if the FBI does not retract a public service announcement (PSA) it issued about the group in May.

The group characterized the FBI's earlier statements in the PSA as "disinformation" and claimed the hack was a retaliatory measure. ShinyHunters is a cyber-extortion organization that frequently targets companies to steal data and threatens to publish it on the dark web.

A representative for ShinyHunters claimed to have accessed the jobs portal on Monday, September 21, and subsequently gained entry to other agency programs, allegedly stealing between 2 and 3 terabytes of files. While the FBI acknowledged the group's claims and the potential compromise of personally identifiable information (PII), the bureau stated the exact point of breach—whether through its own systems or a third-party provider—remains undetermined. A former FBI agent confirmed to NBC News that a sample document provided by the hackers as evidence contained authentic sensitive information.

Cynthia Kaiser, former deputy cyber director of the FBI, stated that because agents often sign their names to court documents, the publication of physical addresses and details about their families could lead to physical harm or targeting by criminals. The scale of the alleged theft, if ShinyHunters' claim of 2 to 3 terabytes of data is accurate, would represent a significant volume of records, though the exact number of individuals affected has not been confirmed.

The FBI said it is working with third-party providers that support the jobs website to mitigate risk. The jobs portal was reported as inaccessible on Wednesday. ShinyHunters has set a deadline of one week from Wednesday to publish the stolen files if the FBI does not retract its May PSA.

Timeline of what happened

Key dates and decisions, in the order they occurred.

  1. May 15, 2026

    FBI issues PSA regarding ShinyHunters

  2. September 21, 2026

    ShinyHunters claims to have breached FBIJobs.gov

  3. September 23, 2026

    FBI announces investigation into the alleged breach

  4. September 30, 2026

    Group's deadline to publish data if demands not met

Summaries are written by The Plain Record to state the facts of a story plainly and without political slant. Drafted with AI assistance and checked against the source record before publication. See how we report, or report a correction.

← Back to the front page

Questions readers ask

What happened: FBI investigates hacking group's claim of data breach at jobs website?

FBI investigation into a hacking group's claim that it breached a jobs portal and stole employee data.

Who is involved?

The FBI and the hacking group ShinyHunters.

When did this happen?

Wednesday, September 23, 2026

Where did this happen?

Washington, D.C.

Why does this matter?

The group claims to have stolen 2 to 3 terabytes of sensitive data in retaliation for an FBI public service announcement.