ShinyHunters Breached FBI Jobs Website
The attack has forced the suspension of applicant portals as the group demands the removal of a federal announcement.
Updated on Sept. 23, 2026 in Cybersecurity
Live Poll
Do you trust the government to keep sensitive personal information secure from cyberattacks?
The hacking group ShinyHunters breached the FBI's job application website on Monday, leading to a temporary site defacement and the suspension of the apply.fbijobs.gov portal. The group claims to have exfiltrated sensitive data concerning both FBI agents and job applicants.
Why it matters
The breach marks a direct retaliatory attempt to coerce federal action against a specific public service announcement released by the FBI. By targeting internal recruitment systems, the group is escalating its conflict with federal cybersecurity authorities following its activity earlier this year.
The attackers set a one-week deadline for the FBI to retract a May 2026 public service announcement regarding the group's past operations. The incident has left critical recruitment portals, including the Special Agent Application Portal, entirely unavailable.
The players
ShinyHunters
A hacking collective known for targeting cloud environments and software providers via social engineering and identity system exploits.
FBI
The domestic intelligence and security service of the United States tasked with federal law enforcement.
The details
ShinyHunters typically exploits weaknesses in identity management systems or software vulnerabilities to breach cloud environments. In this incident, the group defaced the FBI jobs site to publicize its demands and claimed to have compromised personnel records. The attack follows a pattern of high-profile targeting by the group, which has hit entities including Instructure, Salesforce, Snowflake, and McKesson throughout 2026.
Timeline
May 2026: The FBI published a public service announcement regarding ShinyHunters.
Monday, September 21, 2026: The FBI jobs website was breached and subsequently taken offline.
The Tech Race
This breach represents an aggressive departure from standard data exfiltration, moving into direct coercion against federal reporting channels. It challenges the efficacy of official public service announcements as a tool for deterring sophisticated threat actors.
Applicants to the FBI are currently unable to access the apply.fbijobs.gov portal or the Special Agent Application Portal. Candidates should monitor official federal channels for information on when services will be restored and whether their personal data was affected.
The takeaway
This incident serves as a significant escalation in how threat actors interact with federal oversight agencies. Watch for the FBI's response to the one-week ultimatum and any further updates on the restoration of the impacted recruitment portals.
What happens next
The hackers have issued a one-week ultimatum ending September 28, 2026, for the FBI to modify its previous public service announcement.
Further reading
For broader analysis on infrastructure protection and threat actor tactics, visit Cybersecurity.
Live Poll
Do you trust the government to keep sensitive personal information secure from cyberattacks?
