-
ShinyHunters claims it hacked FBI job systems and says it won’t publish the data.
-
The group earlier gave the FBI one week to fix statements about its activities.
-
The FBI has not confirmed the full size of the alleged breach yet.
A hacking group once threatened to leak private FBI records. Now the group says it changed its mind. ShinyHunters is the name behind the threat. The group claims it stole personal data tied to FBI employees and job seekers. It shared this update in a new interview with 404 Media on September 28.
This came just days after the group allegedly broke into the FBI’s online hiring system. At first, ShinyHunters gave the FBI a strict deadline. The bureau had one week to correct claims made in a May notice. That notice had called ShinyHunters a group linked to big data breaches and online extortion. The group didn’t like that description. So it pushed back hard, at least at first.
A threat that quietly faded
ShinyHunters now tells a different story than it did weeks ago. The group told 404 Media it never planned to release the stolen files. It repeated a similar message to Hackread as well.
According to the group, selling the data was never part of the plan either. ShinyHunters described its clash with the FBI as a kind of publicity stunt. The group called it a way to challenge the bureau’s public statements, framing the standoff as a “marketing push” rather than a real extortion attempt.
That framing shifts the story. What looked like a serious threat now reads more like a pressure tactic. Still, the underlying breach claims remain a big deal.
Inside the alleged breach
ShinyHunters first made its breach claim on September 22. The group said it got into FBIJobs.gov, the bureau’s recruitment website. It claimed access to records on current staff, former staff, and job applicants.
The stolen material reportedly included names and home addresses. Phone numbers were part of it too, along with details about employees’ spouses. That kind of information can expose entire families, not just workers.
To prove its claim, the group shared a sample with journalists. That sample held records for about 5,000 people. Reuters reported that some entries could be partly checked against other records.
The FBI has confirmed something happened. The bureau said it noticed unauthorized activity on FBIJobs.gov. Investigators are now checking two possibilities. One is that hackers got in through FBI systems directly. The other is that a third-party vendor supporting the hiring site was the entry point.
One thing remains unclear so far. The FBI has not confirmed exactly how much data was taken. It also hasn’t confirmed that every claim from ShinyHunters is accurate. That means terms like “alleged” and “claimed” still matter here.
Why the risk isn’t fully gone
Even without a public leak, the danger doesn’t disappear. A separate case shows how large-scale user data can also become the subject of leak claims, as reported in the threat actor’s claim of a leak of 23.4 million SplitVPN user records. Experts warn that stolen personal data can fuel harassment. It can also lead to scams that impersonate real people. FBI staff and their families could face unwanted targeting.
The scale of concern is large. The Washington Post reported that roughly 37,000 FBI workers could be affected if the claims hold up. Meanwhile, the New York Times reported on an internal FBI memo. That memo reportedly told staff to assume their personal details may have been exposed, as a safety precaution.
That’s a serious assumption for any organization to make. It shows how much weight the FBI is placing on this incident, even without full confirmation.
There’s also a trust problem. ShinyHunters says it won’t publish or sell the files. But that promise comes only from the hackers themselves. No outside party can confirm the data was deleted. No one can confirm it stays out of other hands either. In short, the threat of a public leak may have passed. The threat to privacy has not fully passed with it.
Where things stand now
The FBI’s investigation continues behind the scenes. Officials are still working to confirm how the breach happened. They’re also working to confirm how far it reached.
For now, the headline update is simple. ShinyHunters says the promised leak will not happen. But the full truth behind the alleged hack is still being pieced together.
People connected to the FBI, current staff, former staff, and applicants alike may want to stay alert. Watching for suspicious calls or messages is a smart move here. So is reporting anything unusual to the proper channels.
This story may still shift as investigators learn more. Coverage from AP News and Ars Technica continues to track the FBI’s response as it develops.
