Insurance
Home›Insurance›Industry & Deals›ShinyHunters claims new FBI breach after NAIC data dump
ShinyHunters claims new FBI breach after NAIC data dump
The group says it stole data on nearly every FBI agent and applicant, and Reuters reports a sample includes Social Security numbers, home addresses, birth dates, and emergency contacts.
The extortion group behind the dark web leak of National Association of Insurance Commissioners data says it has also breached the FBI, expanding a cyberattack that previously targeted an insurance regulator, according to an investigation by Reuters and additional reporting cited by other outlets.
In its account, ShinyHunters took over the FBI recruitment website, FBIJobs.gov, replacing site images with its own branding. The application portals were reportedly still offline as of Wednesday, and the group claimed to hold sensitive data covering nearly every FBI agent and people who have applied to work at the bureau.
A roughly 5,000-record sample shared with journalists reportedly goes beyond a typical breach dump. Reuters said the file includes Social Security numbers, home addresses, birth dates, and emergency contacts, and in some cases links named staff to China- and Russia-focused counterintelligence units, electronic surveillance teams, and human-intelligence programs.
The FBI has not confirmed how the attackers gained access. According to an NBC News statement, it had not yet determined whether the breach began through a third-party provider or its own systems, and it said it was working with vendors supporting the jobs site, while 404 Media and TechCrunch reported that the hackers may have moved from an Oracle PeopleSoft server to an Amazon-hosted government cloud.