FBI Arrests Suspect Linked to ShinyHunters in Cyberattack on Bureau’s Jobs Site
FBI arrests Canadian suspect linked to ShinyHunters in breach of bureau's jobs website. New details emerge on data theft and contractor failure.
POLICY WIRE — Washington, United States — The FBI has arrested a Canadian national suspected of involvement with the ShinyHunters cybercriminal group, which previously breached the bureau’s job website and stole personal information about employees, according to FBI Director Kash Patel.
Patel stated that this arrest is part of a series of recent actions taken by the FBI to dismantle the network, emphasizing the agency’s ongoing efforts to investigate, gather evidence, and respond swiftly to cyber threats. He described the move as a demonstration of the bureau’s commitment to protecting Americans from digital crime.
A law enforcement source confirmed the suspect’s nationality and suggested he was directly involved in the breach of the FBI’s website. However, additional individuals connected to the group are still at large. The source spoke on condition of anonymity, as details of the investigation remain undisclosed. The suspect was reportedly detained in Pennsylvania, as reported by the New York Times, though the FBI did not confirm the specifics of the report.
📄 POLICY WIRE WHITEPAPER PUBLISHED: PAKISTAN’S NATIONAL SECURITY POLICY PRIORITIES
The breach occurred in September, with some senior agents comparing it to the 2015 Office of Personnel Management hack, which compromised over 22 million records. ShinyHunters claimed responsibility for the FBI incident, which they said involved the theft of 2 to 3 terabytes of employee data via a vulnerability in Oracle PeopleSoft software.
FBI Cyber Division Assistant Director Brett Leatherman revealed that a contractor failed to apply a critical security patch, leading to the breach. The contractor was subsequently removed from the project, and the bureau took steps to prevent further damage. Reuters first reported on the contractor’s termination, identifying the individual as having worked with Accenture.
This arrest marks another step in the FBI’s ongoing pursuit of ShinyHunters members, although the suspect was already in custody before the group publicly announced the hack. The breach was first disclosed by 404 Media on September 22.
Reporting by Policy-Wire (PW)
