FBI Data Breach Exposes Agents’ Personal and Medical Information, Raising Swatting and National Security Fears

Groups similar to ShinyHunters, believed to be English-speaking gangs, have previously been linked to swatting incidents and firebombing attacks targeting law enforcement officers and rivals.

ShinyHunters Claims FBI Systems Were Breached

The group claims it breached FBI systems on Monday and later posted details of the alleged attack on a darknet site.

The FBI initially did not respond to requests for comment. On Wednesday, however, the agency acknowledged the breach and said it was “actively investigating” how it occurred.

ShinyHunters also shared samples of the allegedly stolen data with reporters, along with extortion demands.

Personal Details of FBI Agents Allegedly Exposed

The samples appear authentic and include names, home addresses, phone numbers, badge numbers, job titles and spouse information.

The records appear to implicate thousands of agents, including senior officials such as deputy commissioners.

Michael McPherson, a former FBI agent and current senior vice president of security operations at the cybersecurity company ReliaQuest, described the alleged hack as a “security threat to the core of the safety of our agents, especially their families.”

McPherson said agents understand the “inherent risks” that come with the job.

“However, this incident reportedly involves personal data such as home addresses and contact information, which could put families, who are normally isolated from threats associated with such careers, at risk,” he said.

FBI Medical Records Among Allegedly Stolen Data

The criminals also appear to possess highly sensitive medical information about thousands of special agents.

BBC News has seen samples of the stolen “fitness for work” examinations. The records include blood and urine test results, as well as a doctor’s note mentioning symptoms such as “shellfish and banana allergies.”

Investigators’ full names and addresses, along with references to medical conditions such as “blood in the urine” and “high cholesterol,” are now reportedly in the hands of criminals.

Swatting and Dark-Web Risks

Swatting is a form of harassment in which a perpetrator makes a false emergency call intended to send armed police, known as SWAT teams in the United States, to a victim’s home.

Cynthia Kaiser, a former deputy director of the FBI’s cyber division who now heads Halcyon’s research center, said ShinyHunters appeared to have already lost control of some of the data. She said it was circulating among online cybersecurity research groups and could cause harm even before the main information was released.

“Much of the damage may have already been done, and as we’ve seen with past FBI data breaches, the information continues to circulate on the dark web years later,” Kaiser said.

National Security Concerns

The breach has also raised concerns about national security. Exposed personnel could become targets for recruitment efforts by hostile foreign intelligence agencies.