The ShinyHunters hacking group has publicly claimed to have gained unauthorized access to the systems of the U.S. Federal Bureau of Investigation (FBI) and stolen the personal data of thousands of current employees, former agency workers, and job candidates. According to the hackers themselves, the main target of the attack was the FBIJobs.gov portal — the official website through which the FBI publishes job openings and accepts applications from candidates. The statement came against the backdrop of the FBI publishing a report in May 2026 on ShinyHunters' methods of operation, which, according to the group, served as the direct trigger for the retaliatory cyberattack.

Targets and Stated Motivation of the Attack

ShinyHunters representatives emphasize that the choice of target was not accidental: the FBIJobs.gov portal is a public interface for the FBI's interaction with job applicants and, by the hackers' logic, contains extensive arrays of personal data. The group positions its action as a "response" to the FBI's publication in May 2026, in which the agency revealed ShinyHunters' tactics and tools. Thus, the hackers are constructing a narrative of a symmetric response to the informational pressure from U.S. law enforcement agencies. At the same time, the full scale of the claimed attack remains unknown to all parties as of the time of publication.

What Is Known About the Stolen Data

Earlier, the outlet 404 Media reported that it had received from ShinyHunters a sample database of approximately five thousand records. According to the editorial team's claims, the sample contains the names, home addresses, and phone numbers of employees, as well as information about the spouses of some of them. The hackers link this dataset to the FBI's internal database, however, independent attribution of the data to specific agency systems has not been carried out to date. It is important to note that 404 Media's possession of a sample is not equivalent to proof that the information was extracted specifically from the FBI's protected infrastructure rather than from open or semi-open sources.

Partial Verification by Journalists

Journalists who gained access to the data published by the hackers managed to conduct a partial check: nine matches with real individuals were found. This confirms that the sample contains current personal information; however, as the researchers themselves emphasize, nine matches do not allow a conclusion that the information was stolen directly from FBI systems. The data could have been collected from open sources, job candidate databases, or third-party aggregators. Thus, the verification remains fragmentary and does not resolve the question of the actual scale of the compromise.

FBI Response and Lack of Independent Confirmation

The FBI did not provide Reuters with an immediate comment on ShinyHunters' claims. As of the time of preparing this article, the agency neither confirmed nor denied the fact of unauthorized access to its systems. No independent technical audit that would definitively establish that ShinyHunters actually gained access to the claimed data arrays has been conducted to date. The only thing confirmed at the factual level is that the group made a public statement, and 404 Media received and published a data sample that the hackers link to the FBI.

Contradictory Data

There is a significant gap between ShinyHunters' claims and the results of the journalistic verification. The hackers claim the compromise of "thousands" of current and former employees, whereas journalists were able to confirm only nine matches with real individuals, and without proof that the data originated from FBI systems. On the one hand, 404 Media's possession of a sample of five thousand records with detailed personal data (including information about spouses) indicates that some array of information did indeed leak. On the other hand, neither the FBI nor independent cybersecurity laboratories have confirmed that these data were extracted from the bureau's protected infrastructure. Thus, the reader is presented with a picture in which the fact of the statement and the existence of a data sample are confirmed, while the actual scale and source of the compromise remain a matter of debate.