← Latest briefing

World News

Patel says FBI arrested accused ShinyHunters co-conspirator over jobs portal breach

Director Kash Patel says the breach involved a third-party vendor platform, while the suspect's identity and charges remain unclear.

The short version

  • FBI Director Kash Patel said the bureau arrested an accused co-conspirator of the ShinyHunters hacking group.[Associated Press]
  • The group reportedly claimed it breached the FBI jobs portal and obtained data on nearly all employees; Patel said the breach occurred on a third-party vendor platform.[Associated Press]
  • A contractor reportedly failed to apply a required security patch, and the FBI says it has removed that contractor.[CBS News]
  • The suspect's identity and charges were not immediately clear, and anonymous sources say the suspect was detained in Pennsylvania and other co-conspirators remain at large.[Associated Press · CBS News]

Key facts

  • The FBI arrested an accused co-conspirator of the ShinyHunters hacking group, according to FBI Director Kash Patel.[Associated Press]
  • Patel said the breach occurred on a platform managed by a third-party vendor.[Associated Press]
  • ShinyHunters claimed it obtained sensitive personal data on nearly all FBI employees and said its action responded to an FBI public advisory from May.[Associated Press]
  • The identity of the arrested person and the charges they might face were not immediately clear.[Associated Press]
  • Experts said the exposed data could enable extortion, swatting and harassment of FBI agents and their families, and spouse identities were also reportedly obtained.[Associated Press]
  • FBI Cyber Division Assistant Director Brett Leatherman said a contractor failed to implement a required security patch, and the FBI has removed the contractor.[CBS News]
  • ShinyHunters claimed it stole 2 to 3 terabytes of FBI employee data by exploiting a new vulnerability in Oracle PeopleSoft.[CBS News]
  • Anonymous sources told CBS News the suspect was detained in Pennsylvania and is a Canadian citizen.[CBS News]

What remains uncertain

  • The arrested suspect's identity and charges have not been publicly confirmed in the cited reporting.[Associated Press · CBS News]
  • The suspect's direct role in the hack and the status of other co-conspirators rest on anonymous law enforcement sources.[CBS News]
  • The scope of data taken, including ShinyHunters' claims about nearly all employees and 2 to 3 terabytes, is unverified.[Associated Press · CBS News]
  • The contractor's employer was reported as Accenture, a detail attributed to Reuters and not confirmed in the cited CBS reporting.[CBS News]

Sources

Outlet counts describe coverage, not independent confirmation. Reports may share a wire service or original source.