BreachPublished 22 Sep 2026

ShinyHunters claims FBI hack, data theft in PeopleSoft zero-day breach

Source Bleeping Computer

zero-day

Description

The ShinyHunters extortion group claims to have exploited a previously unknown zero-day vulnerability in Oracle PeopleSoft to breach FBI systems. The attackers reportedly accessed internal FBI services and exfiltrated sensitive data related to employees and job applicants. No technical details or confirmed patches are currently available. The breach is alleged but not independently verified, and no known exploits in the wild have been confirmed.

Impact

If true, the breach could lead to exposure of sensitive FBI employee and job applicant data, potentially impacting privacy and operational security. The exploitation of a zero-day in PeopleSoft indicates a serious risk to organizations using this software until a patch is released. However, the lack of confirmed exploitation or technical details limits the ability to assess the full scope or severity.

Defensive guidance

Organizations using Oracle PeopleSoft should monitor vendor communications closely and apply any official fixes promptly once available. No specific mitigations are currently documented.

Summary

ShinyHunters claims to have leveraged a zero-day vulnerability in Oracle PeopleSoft to compromise FBI internal systems, resulting in unauthorized access and theft of sensitive personnel data. The vulnerability is currently unpatched, and no detailed technical information or vendor advisories have been published. The incident is reported by a third party and lacks independent confirmation or evidence of exploitation beyond the claim.

References

bleepingcomputer.com/news/security/shinyhunters-claims-fbi-hack-data-theft-in-peoplesoft-zero-day-breach/ (opens in a new tab)

Community reviews

Loading reviews…

Description

AI analysisMachine-generated, updated 22 Sep 2026, 19:17 UTC

References

Community reviews

Related threats