AI-generated illustration; not a photograph of the reported event.
- calendar_today October 9, 2026
FBI Apprehends Suspect in ShinyHunters Cyberattack on Jobs Website
This week, the Federal Bureau of Investigation (FBI) announced the arrest of an individual suspected of involvement with ShinyHunters, the cybercriminal group behind the recent hack of the bureau's jobs website. The hack resulted in the theft of personal data related to FBI employees and has been described as one of the most significant federal system breaches since 2015.
Details Surrounding the Arrest
FBI Director Kash Patel confirmed the arrest on Friday, highlighting ongoing efforts to dismantle the ShinyHunters group and pursue additional leads. "This arrest demonstrates the strength and reach of our efforts to protect Americans from cybercrime," Patel stated. While the FBI did not release details regarding the suspect's identity or the location of the arrest, sources told CBS News the individual was taken into custody in Pennsylvania.
A law enforcement source identified the suspect as a Canadian citizen, believed to be directly involved in the FBI jobs website hack. The source also indicated that other alleged co-conspirators remain at large. The sources requested anonymity due to the sensitivity of the ongoing investigation.
Background of the FBI Jobs Website Hack
The breach occurred in September, targeting the FBI's jobs website in what some veteran agents have labeled one of the worst federal government system breaches since the 2015 Office of Personnel Management attack, where over 22 million government records were stolen. ShinyHunters, known for a series of high-profile data breaches, claimed responsibility for the incident, which involved the theft of 2 to 3 terabytes of data concerning FBI workers.
Exploiting Oracle PeopleSoft Vulnerability
The hackers reportedly exploited a recent vulnerability in Oracle PeopleSoft, a popular human resources management platform, to access and steal the personal data of FBI employees. The breach raised concerns over the security of federal HR systems and the effectiveness of cybersecurity measures in place.
Contractor Security Failure Identified
Earlier in the week, Brett Leatherman, Assistant Director of the FBI's Cyber Division, stated that a contractor had failed to implement a necessary security patch to the targeted system. Following an internal review, the bureau removed the contractor and implemented additional steps to mitigate further risks and protect the FBI workforce. Reuters reported that the contractor was employed by Accenture.
Wider Investigation and Previous Arrests
The latest arrest marks another development in the FBI's broader investigation into ShinyHunters. Earlier reports indicated that Jordanian authorities recently detained Saif al-Din Khader, known online as "Rey," on suspicion of involvement with the group. Another suspected ShinyHunters member, 24-year-old Pepijn van der Stap, was arrested in Amsterdam in mid-September. However, van der Stap was already in custody before ShinyHunters publicly announced the FBI jobs website hack.
Ongoing Response to Data Breach and Cyber Threats
The breach was first reported by 404 Media on September 22. Investigations continue as law enforcement agencies work to identify and apprehend outstanding suspects connected to this major data breach. In the wake of the hack, the FBI has reiterated its commitment to enhancing cybersecurity measures and safeguarding sensitive government and employee data from similar incidents in the future.
Source: cbsnews.com.
