ShinyHunters, a known cybercrime and extortion group, alleges they compromised FBI systems by exploiting a zero-day vulnerability in Oracle PeopleSoft software, potentially CVE-2026-35273. They claim to have stolen 2-3 TB of sensitive data including personal information of FBI employees and job applicants. To support their claim, they defaced the FBI jobs subdomain and posted a seizure message. The group disputes negative assertions made in an FBI FLASH report about their tactics and affiliations. The FBI has acknowledged the investigation but has not disclosed further details. Independent reviewers have found some of the leaked data sample to appear authentic, though full verification is pending.

If confirmed, the breach exposes sensitive personal information of thousands of FBI employees and applicants, potentially compromising privacy and operational security. The defacement of an FBI subdomain indicates a successful unauthorized access to public-facing infrastructure. The exploitation of a zero-day vulnerability in Oracle PeopleSoft suggests a critical security flaw affecting organizations using this software. The incident may undermine trust in FBI cybersecurity measures and could have broader implications if the stolen data is used for further attacks or identity theft.

The FBI is actively investigating the incident. Organizations using Oracle PeopleSoft should monitor vendor advisories for patches related to CVE-2026-35273 or other zero-day vulnerabilities. Since the vulnerability exploited is a zero-day, no confirmed patch status is available; check Oracle's official advisories for updates. No specific mitigation steps from the FBI or Oracle are provided in the source content. Users should await official guidance and apply patches promptly once available.