The FBI has told its own employees to assume hackers stole their personal information, according to an internal memo reported by Reuters. The bureau is working from the premise that data on every staffer may be out, after a claimed breach of its jobs site, FBIjobs.gov.
The group claiming credit is ShinyHunters, a cybercrime crew that says it holds data on almost all FBI agents and everyone who applied for an FBI job. It puts the haul at 2 to 3 terabytes, including names, phone numbers, home addresses, and sometimes spouse details.
The group says it got in through a previously unknown flaw in Oracle’s PeopleSoft, software many organizations use to run HR. The FBI has not confirmed the method.
The one-week window the hackers set has passed, and ShinyHunters says it will not publish the data. The memo tells staff to assume their data is already out.