The US Federal Bureau of Investigation (FBI) has confirmed that it is investigating unauthorised activity targeting its official jobs website, FBIjobs.gov, which went offline following the incident. The website, the main portal for prospective employees to learn about the FBI and initiate the application process, remained offline on Wednesday morning. The FBI stated that it is aware of claims regarding unauthorised activity affecting FBIjobs.gov and is currently investigating.
A hacking group known as ShinyHunters claimed responsibility for the hack, stating that they had accessed "very sensitive data" on nearly all FBI agents and individuals who submitted job applications. The group sent a message to FBI Director Kash Patel and the assistant director in charge of the FBI's cyber division, making the claims. The message could not immediately be verified, and an FBI spokesperson declined to comment further.
ShinyHunters gave the FBI one week to retract what it described as false characterisations in an earlier FBI public service announcement targeting the group. The announcement, from May, characterised ShinyHunters as a "cyber criminal group specialising in large-scale data breaches and extortion." The group took issue with being labelled as "threat actors" who often use their real or exaggerated claims of access to sensitive or personal information to prompt payment from victims.
The FBI has been a common hacking target in the past. In March, the FBI disclosed that it was investigating "suspicious activities" on an internal system that contains sensitive information related to surveillance operations and investigations. Also that month, a pro-Iranian hacking group claimed to have hacked an account of Patel's and posted online what appear to be years-old photographs of him, along with a work resume and other personal documents dating back more than a decade.
The FBI jobs website hack comes as a significant blow to the agency, which is responsible for investigating and enforcing federal laws in the US. The agency's online presence and data security have come under scrutiny following the incident. An email to an address associated with ShinyHunters was not immediately returned, and it is unclear what actions the group plans to take next.
The incident highlights the ongoing threat of cyber attacks to government agencies and organisations. ShinyHunters' claims of accessing sensitive data on nearly all FBI agents and job applicants have raised concerns about the potential for identity theft and other malicious activities. The FBI's investigation is ongoing, and it is unclear what steps the agency will take to prevent similar incidents in the future.
The FBI's decision to take its jobs website offline suggests that the agency is taking the incident seriously and is working to prevent further unauthorised access. The incident serves as a reminder of the importance of robust cybersecurity measures to protect sensitive information and prevent cyber attacks.
Key points
- The FBI jobs website was taken offline after ShinyHunters claimed access to sensitive data on nearly all FBI agents and job applicants.
- ShinyHunters gave the FBI one week to retract what it described as false characterisations in an earlier FBI public service announcement targeting the group.
- The FBI has been a common hacking target in the past, with previous incidents involving internal systems and high-ranking officials' accounts.
