5 minNews
FBI Arrests Suspected ShinyHunters Co-Conspirator After Jobs Portal Breach
FBI Director Kash Patel announced the arrest of another suspected co-conspirator linked to the ShinyHunters hacking group, which allegedly stole personal data from FBI employees and applicants through the bureau's jobs portal.
FBI Director Kash Patel announced Friday that agents arrested another suspected co-conspirator linked to the ShinyHunters hacking group earlier this week, as the bureau continues investigating a cybersecurity incident involving its jobs website.
The arrest is the latest in a series of FBI actions against the hacking network in recent days, according to Patel, who said investigators are pursuing additional leads and evidence. The group is believed to be responsible for the recent FBIjobs.gov incident, which occurred on a platform managed by a third-party vendor.
«Earlier this week, our agents in the field arrested another suspected co-conspirator of the ShinyHunters group, the group believed to be responsible for the recent FBIjobs.gov incident, which occurred on a platform managed by a third-party vendor,» Patel said in an Oct. 9 statement.
Patel said the FBI is working with its partners to dismantle the group and its associates. «This arrest demonstrates the strength and reach of our efforts to protect Americans from cybercrime. We will continue to work closely with our partners to disrupt what's left of the ShinyHunters group and their associates, no matter where they operate.»
ShinyHunters, a criminal hacking and extortion group, previously said it obtained sensitive personal information belonging to FBI employees and applicants through the bureau's jobs portal. The group said it stole information belonging to nearly all FBI agents and people who applied to work for the bureau, Reuters previously reported.
A sample of data shared with the outlet contained agents' names, home addresses, Social Security numbers, assignments and, in some cases, names of family members. The FBI previously said it was investigating whether the breach originated within its own systems or through a third-party provider supporting FBIJobs.gov. The extent of the alleged breach has not been independently confirmed.
Jason Pack, a retired FBI supervisory special agent and CEO of Media Rep Global Strategies, previously told Fox News Digital the distinction between stolen personnel information and access to classified investigative systems is critical. «There is a meaningful difference between somebody obtaining personnel information and somebody gaining access to classified investigative systems,» Pack said. «Based on what we know right now, there is no indication they have the keys to the kingdom.»
A representative for the Department of Justice did not immediately respond to Fox News Digital's request for comment.
The arrest marks another step in the FBI's broader effort to disrupt the ShinyHunters network, which has been linked to high-profile data thefts and extortion campaigns. The bureau has not released the name of the individual arrested or the specific charges filed. It remains unclear whether the suspect is connected to the FBIjobs.gov breach directly or to other ShinyHunters operations.
Cybersecurity experts have noted that third-party vendors often represent a vulnerable entry point for government agencies, as they may not adhere to the same security standards as the agencies themselves. The FBI has not disclosed which vendor managed the affected platform or what security measures were in place at the time of the incident.
The investigation is ongoing, and the FBI has urged current and former employees and applicants to monitor their personal information for signs of misuse. The bureau has not said whether it will offer credit monitoring services to those affected.
ShinyHunters has been active for several years, targeting companies and organizations across various sectors. The group's alleged theft of FBI-related data has raised concerns about the potential for espionage or targeted attacks against law enforcement personnel. However, officials have stressed that there is no evidence yet that the stolen data has been used for such purposes.
Patel's announcement comes amid heightened scrutiny of federal cybersecurity practices and the risks posed by third-party contractors. The FBI has not provided a timeline for completing its investigation or for any additional arrests.
6
