FBI REPORTEDLY DECLARES ‘CYBER SECURITY INCIDENT' AFTER HACKERS STEAL AGENTS' PERSONAL DATA

Summary from the TLDR InfoSec newsletter

The FBI told staff that a hack of its FBIJobs.gov portal exposed agents' and applicants' names, addresses, job titles, Social Security numbers, and some medical records, including blood and urine samples and psychiatric reports. ShinyHunters says it exploited an Oracle PeopleSoft vulnerability and is not demanding money, but wants the bureau to correct an earlier report about its activities. The portal remains offline, and the bureau has not publicly confirmed whether the breach meets the legal threshold for a “major incident” requiring notification to Congress.