Hackers claim theft of medical data of FBI agents in the US — MyJoyOnline

In the United States, the ShinyHunters group claimed to have breached the systems of the Federal Bureau of Investigation and stolen confidential medical data belonging to thousands of special agents. BBC News reports that the FBI acknowledged the security breach and said it is actively investigating the circumstances of the incident.

What data may have fallen into hackers’ hands

Journalists received samples from the hackers of allegedly stolen medical examination results used to assess fitness for service. These samples appear to be genuine and contain blood and urine test results, doctors’ notes, as well as references to health conditions, including elevated cholesterol levels and blood in urine.

The samples also included full names, addresses, phone numbers, badge numbers, job titles and information about the agents’ spouses. According to Reuters, the records may include data on employees involved in investigations related to Russia, China and drug cartels. 404 Media also reported the possible disclosure of information about a little-known FBI unit that deals with breaking into systems.

More current news is available on the UA.News Telegram channel Telegram.

ShinyHunters’ demands and the FBI’s response

ShinyHunters claims that it initially underestimated the scale of the theft and now allegedly has data on approximately 60,000 current and former FBI employees. It was initially assumed that the leak could affect data on 38,000 current bureau employees. CyberSmart chief executive Jamie Akhtar urged caution regarding the hackers’ claims, although he described the incident as extremely alarming.

The attackers are not demanding money. They said they want to secure the withdrawal of an FBI advisory published in May which, they say, offended them. The group threatens to publish the full data set in five days if the bureau does not meet its demands.

The hackers claim they exploited a vulnerability in Oracle cloud storage used by the FBI and gained access to the FBIJobs, FBI BEAST, FBI MedLink and FBI BICS platforms. At the same time, the bureau said it is still determining whether its systems were breached directly or whether a third-party supplier was compromised. Experts warn that such data can be used for phishing, identity impersonation, fraud, blackmail and targeted attacks on law enforcement officers.