FBI investigates breach of jobs website as hackers claim ‘very sensitive data’ stolen
The FBI is investigating a breach of its jobs portal, fbijobs.gov, after the hacking group ShinyHunters claimed to have stolen sensitive personnel data and demanded the bureau retract a public statement it made about the group in May.
Written by Roundtablefrom 3 outlets' reporting
01What happened
The FBI says it is investigating a breach of its fbijobs.gov portal after the hacking group ShinyHunters claimed responsibility. ShinyHunters says it stole sensitive data on current and former FBI employees and applicants. The group is demanding that the FBI retract a public service announcement it issued in May that described ShinyHunters as threat actors. FBIjobs.gov remained offline as of Wednesday. The FBI says it is working with third-party providers that support the portal to determine whether the breach occurred through its own systems or those of a contractor.
The facts every outlet at this table agrees on.
02Every voice
One entry per outlet, in the order they should be read. Each links back to the reporting it was drawn from — check any of it.
Al Jazeera English
Read the original· aljazeera.comHow they framed it
Al Jazeera English frames the event as a hacking group holding stolen FBI data hostage to pressure the bureau into retracting a statement, with the breach details and point of entry still under investigation.
In their words
The FBI is investigating a breach of its jobs portal, fbijobs.gov, by the hacking group ShinyHunters, which claims to have stolen two to three terabytes of sensitive data on current and former employees. The group says it is holding the data until the bureau retracts an unflattering statement it issued about the hackers in May, and the portal remained offline as of Wednesday afternoon. The agency said in a statement that it is aware of the claim and is actively and aggressively investigating to mitigate risk. Several news outlets, including Reuters, reported they had seen parts of the data, which includes granular detail about bureau officials' job assignments.
BBC News
Read the original· bbc.co.ukHow they framed it
BBC News frames the event as a possible theft of data on around 38,000 personnel, highlighting the specific types of information stolen and the group's threat to publish full databases if its demands are not met within a week.
In their words
The FBI is investigating claims by the hacker group ShinyHunters that it stole sensitive personal data on around 38,000 bureau personnel and applicants, including names, badge numbers, home addresses and medical records. The group says it breached FBI systems through a vulnerability in Oracle cloud storage and is demanding the FBI retract a public advisory describing it as threat actors, threatening to publish the full databases within a week otherwise. The FBI says it is working with third-party providers to determine whether its own systems or those of a contractor were compromised.
The Guardian
Read the original· theguardian.comHow they framed it
The Guardian frames the event as an apparent breach of the FBI's jobs website, with the hacking group demanding the retraction of a May public service announcement and claiming access to sensitive data on nearly all agents and job applicants.
In their words
The FBI is investigating an apparent breach of its jobs website after the hacking group ShinyHunters claimed to have stolen 'very sensitive data' on nearly all agents and job applicants. The group demanded the bureau retract a May public service announcement describing it as a cyber criminal extortion outfit, giving the FBI one week to comply. FBIjobs.gov remained offline as the bureau said it was looking into the claims. In its message, ShinyHunters said it would give the bureau one week to correct or remove what it says are false allegations in the FBI public service announcement from May.
03Where they differ
The outlets differ in the specificity of data stolen. Al Jazeera English reports two to three terabytes of data without a specific number of individuals. BBC News reports data on around 38,000 personnel and applicants, including names, badge numbers, home addresses, and medical records. The Guardian reports 'very sensitive data' on nearly all agents and job applicants without a specific number. BBC News specifies the breach method as a vulnerability in Oracle cloud storage, while Al Jazeera English and The Guardian do not mention the method. BBC News and Al Jazeera English report the group's threat to publish data, with BBC specifying a one-week deadline; The Guardian reports the one-week deadline for retraction. All three note the FBI's investigation and the portal being offline.
Described, not adjudicated. Roundtable does not tell you which account is right.
04Still open
- What was the exact number of individuals whose data was stolen, and what specific data types were compromised?
- Was the breach through the FBI's own systems or those of a third-party provider?
- Did ShinyHunters actually obtain the data it claims to have, and what evidence has been verified?
- What will the FBI do in response to ShinyHunters' demand to retract its May public service announcement?
- Will ShinyHunters publish the full databases if its demands are not met?
