FBI Arrests Suspected Member of ShinyHunters After Jobs Site Breach
Wertynews.com – The FBI arrests suspected member of ShinyHunters as it investigates a breach involving the bureau’s employment website. The intrusion exposed employee-related personal information and renewed concerns about cybersecurity protections for federal systems maintained by outside contractors.
FBI Director Kash Patel announced the latest arrest on Friday. Authorities did not publicly identify the suspect or say where the arrest occurred, though a U.S. official and another person familiar with the matter said the person was detained in Pennsylvania.
This is the latest arrest this FBI has made in a matter of days involving this network, as we work non-stop to dismantle the group, pursue new leads and evidence, and act quickly.
A law enforcement source said the person is a Canadian citizen believed to have played a direct role in the FBI website compromise. Other suspected conspirators remain outside custody, according to the source.
FBI Jobs Website Breach Exposed Sensitive Employee Data
The FBI jobs website was compromised in September. ShinyHunters claimed responsibility and said it obtained between 2 and 3 terabytes of information connected to FBI employees.
Veteran agents have said the breach could be among the most serious cyberattacks on a federal government system since the 2015 Office of Personnel Management incident, when more than 22 million government records were stolen.
The group said it exploited a newly discovered vulnerability involving Oracle PeopleSoft, a human-resources management product widely used to organize employee records. Personnel platforms can contain personal, professional and security-related information, making them valuable targets for cybercriminals.
An internal FBI review found that a contractor did not apply the security patch required for the affected system. Brett Leatherman, assistant director of the FBI Cyber Division, said the bureau removed the contractor and took action to limit further risk.
The FBI has removed the contractor and taken all necessary steps to both mitigate any further risk and protect our workforce.
ShinyHunters Investigation Includes Arrests Abroad
The FBI arrests suspected member of ShinyHunters following other recent detentions tied to the group. Jordanian authorities detained Saif al-Din Khader on Sunday. Khader uses the online name “Rey” and is suspected of involvement with the network.
Another alleged member, 24-year-old Pepijn van der Stap, was arrested in Amsterdam. His Sept. 15 detention came before ShinyHunters publicly claimed it had accessed the FBI jobs website. The breach became public on Sept. 22.
The investigation shows how cybercrime cases often cross national borders. Suspects, victims, software providers, hosting services and investigators may all be located in different countries, requiring coordinated law-enforcement efforts.
For FBI employees whose information may have been affected, stolen personnel data can create risks beyond the initial breach. Criminals may use it to craft phishing messages, attempt identity fraud or identify people for further targeting. The FBI has said it is working to protect its workforce and reduce the potential impact.
FAQ: FBI Jobs Website Hack and ShinyHunters Arrests
What was compromised in the FBI jobs website breach?
ShinyHunters said it obtained between 2 and 3 terabytes of information associated with FBI employees. The reported breach involved an FBI employment system and raised concerns about exposed personnel-related records.
How did the FBI jobs website breach happen?
The hackers said they exploited a newly discovered Oracle PeopleSoft vulnerability. The FBI later found that a contractor had not applied the security patch needed for the targeted system.
What should people do if they receive suspicious messages related to the breach?
Be cautious with unexpected emails, calls or messages that request personal information, passwords or financial details. Verify communications through official channels and avoid opening unfamiliar links or attachments.