A hacking group with a track record of high-profile breaches is claiming it has compromised FBI systems and obtained data on all bureau employees and applicants, according to widespread discussion on Bluesky following initial reporting by 404 Media.

The collective known as ShinyHunters posted claims that it successfully infiltrated FBI-related services and extracted what users describe as a massive trove of personal information. According to posts sharing details from the 404 Media investigation, a sample of 5,000 alleged agents includes names, home addresses, phone numbers, and information about FBI employees' spouses.

Verification Efforts and Data Contents

Independent journalist Joseph Cox, whose handle @josephcox.bsky.social appears in the conversation, reported conducting his own analysis of the leaked material. "I have dug into some of the sample with open source info and previously compromised data," Cox posted. "It shows people in this FBI breach are U.S DOJ personnel."

The breach allegedly involves exploitation of PeopleSoft systems, with one user noting that "ShinyHunters claims a PeopleSoft zero-day let it breach FBI systems, stealing 2-3TB of data on employees and applicants." Posts indicate the group has defaced a jobs-related website but has not demanded ransom for the stolen information.

Broader Implications and Connected Incidents

The Bluesky conversation reveals this breach may be part of a larger pattern. Users noted ShinyHunters' involvement in other recent security incidents, with one post observing: "ShinyHunters, the hackers behind the April 2026 Instructure security breach, have apparently hacked the FBI."

The discussion also surfaced reports of a separate but potentially related incident involving driver's licenses. Multiple Canadian news outlet accounts posted about RCMP awareness of "an FBI probe into alleged data breach of millions of drivers' licences in Canada, U.S.," with posts suggesting companies like Nexus and Hertz "seem to be at the center of this."

National Security Concerns

Posts across the platform emphasized the potential severity of the breach. One user characterized it as having "all sorts of national security & counterintelligence implications," while another called it "a very serious security breach."

The conversation included criticism of current FBI leadership, with some users questioning accountability. One post asked "WHY does Ka$h Patel still have a job?!" in reference to the reported breach, though Clear Press cannot independently verify any connection between leadership and the alleged security failure.

What Makes This Breach Significant

If verified, this breach represents a particularly sensitive compromise. Unlike typical corporate data breaches affecting customer information, posts suggest this leak exposes the personal details of federal law enforcement personnel — the kind of information that could theoretically be used to target agents or their families.

The inclusion of spouse information in the leaked data adds another layer of concern. As users discussing the breach noted, such details extend the potential security risk beyond the employees themselves to their immediate family members.

The ShinyHunters Track Record

Discussion threads identified ShinyHunters as a group with previous high-profile breaches. One user specifically mentioned their "April 2026 Instructure security breach," adding that "Instructure hasn't given an update on the breach for over two months, leaving students in the dark."

This history lends some credibility to the current claims, though posts make clear that full verification of the alleged FBI breach is still ongoing. The group's pattern appears to involve significant data theft without immediate ransom demands, focusing instead on exposure and disruption.

Ongoing Investigation

Posts indicate that cybersecurity researchers and journalists continue analyzing the leaked data to verify its authenticity and scope. A specialized Bluesky feed has been created to track developments, described as "tracking reporting on ShinyHunters' claims, leaked applicant data, PeopleSoft exploit and coverage."

The conversation reflects both concern about the immediate security implications and frustration about broader patterns of inadequate cybersecurity protection for sensitive government systems. As one user summarized: "This is a good time for me to remind you all that Instructure hasn't given an update on the breach for over two months" — suggesting a pattern of insufficient transparency following major security incidents.

What remains unclear from the online discussion is the FBI's official response, the full extent of the compromised data, or whether the breach has been definitively confirmed by federal authorities. The conversation on Bluesky captures a moment of significant alarm about potential exposure of federal law enforcement personnel data, with verification efforts still underway.