FBI Arrests Another Shinyhunters
FBI Arrests Another Shinyhunters 🚨
The FBI has arrested another suspected co-conspirator of ShinyHunters, FBI Director Kash Patel announced on October 9 in a post on X. ShinyHunters is the extortion group that claimed in September to have breached the FBI’s jobs portal, stealing sensitive data on almost all FBI agents and job applicants. The suspect, a Canadian citizen, was apprehended in Pennsylvania, according to reports from The New York Times and CBS News. A law enforcement source indicated that the suspect is believed to have been directly involved in the hack.
Patel’s post did not clarify whether the suspect participated in the breach but referred to ShinyHunters as “the group believed to be responsible for the recent FBIjobs.gov incident.” Patel also stated that the FBI will continue collaborating with its partners “to disrupt what’s left of the ShinyHunters group and their associates, no matter where they operate.”
Background on the Arrests 🔍
Reuters counts this new arrest as the third made public since the breach news broke in late September. The FBI had previously reported on October 3 that it had “already worked with partners to arrest multiple subjects.” Notably, a man arrested in the Netherlands was taken into custody a week before ShinyHunters announced the FBI breach on September 22. The FBI described him as one of the group’s alleged leaders, with Dutch police making the arrest under local law with FBI support. Another suspect, Khader, detained in Jordan, is reportedly cooperating with the FBI.
Data Breach Details 📊
A sample of the data shared by ShinyHunters included extensive personal information on FBI employees, sensitive job role details, and psychiatric and medical information, as found in a Reuters analysis. An internal FBI notice confirmed that hackers obtained employee information, with sources indicating that the breach resulted from a security failure on a platform managed by an outside organization. This incident occurred after a contractor failed to implement a security patch explicitly issued to secure the platform, as stated by Brett Leatherman, assistant director of the FBI’s Cyber Division, on October 5. The FBI has since removed the contractor involved.
ShinyHunters’ Motives 💰
ShinyHunters claimed it targeted the FBI in response to an advisory from May, which it alleges contains false claims about the group. The advisory describes ShinyHunters as a cybercriminal group specializing in large-scale data breaches and extortion. The FBI alleges that the group has breached over 140 organizations and collected at least $70 million in extortion payments since last year.