ShinyHunters claims it breached FBI systems using a new Oracle PeopleSoft zero-day vulnerability, gaining RCE and moving laterally into FBI-managed AWS GovCloud infrastructure. The group claims 2-3 TB stolen including employee and applicant data.
The attack is allegedly retaliation for an FBI FLASH report published in May 2026. Oracle has not confirmed the zero-day. FBI jobs portal displays maintenance message.