Recent Security Event

In September of 2026, an FBI website was compromised by a hacker group known as ShinyHunters. They were able to steal tons of employees PII, including SSNs, phone numbers, birth dates, emergency contacts, as well as security intelligence on other nations. They found that the web portal that the FBIjobs.gov website was using was a vulnerable version of the PeopleSoft software. They used URL-encoded characters to bypass the web apps firewall and gain the attackers were able to gain complete access to the platform through this exploit. Some steps that could be taken to prevent this from happening is more frequent monitoring of third-party softwares and whether they are up to date with security patches or not. All three parts of the CIA triad were affected, the confidentiality of employees' sensitive data was impacted, the affected system and platform were offline, and the integrity of all affected data was affected since unauthorized individuals gained access to this data.

Works Cited:

ABC News. (2026, October 9). Suspect arrested in FBI hack that exposed employee information. https://abcnews.com/Politics/suspect-arrested-fbi-hack-exposed-employee-information/story?id=137134928

Reuters. (2026, September 25). Shinyhunters hackers expanded attacks on Oracle’s ... ShinyHunters hackers expanded attacks on Oracle’s PeopleSoft, Google says. https://www.reuters.com/legal/government/shinyhunters-hackers-expanded-attacks-oracles-peoplesoft-google-says-2026-09-26