The FBI has arrested another suspected member of the ShinyHunters extortion group believed to be involved in the recent breach of FBI systems, Director Kash Patel announced Friday.
"Our agents in the field have arrested another suspected co-conspirator of the ShinyHunters group – the group believed to be responsible for the recent http://FBIjobs.gov incident, which occurred on a platform managed by a third-party vendor.," Patel said on X.
"This is the latest arrest this FBI has made in a matter of days involving this network, as we work non-stop to dismantle the group, pursue new leads and evidence, and act quickly."
While Patel did not identify the suspect or disclose where the arrest occurred, The New York Times reports that the suspect is a Canadian citizen who was arrested in Pennsylvania and is considered a primary co-conspirator in the intrusion.
Authorities have not publicly disclosed the suspect's name or the specific charges against him.
The arrest is the latest in a series of law enforcement actions against ShinyHunters after the hacking group breached FBI systems last month.
ShinyHunters told BleepingComputer in September that it accessed FBI systems by exploiting an alleged Oracle PeopleSoft zero-day vulnerability before moving laterally into FBI-managed AWS GovCloud infrastructure.
The threat actors claimed they stole between 2TB and 3TB of data, including information on current and former FBI employees, job applicants, medical and psychiatric records, and internal service records.
Data samples shared with BleepingComputer and other media outlets confirmed that the breach exposed a variety of employee information, including home addresses, Social Security numbers, sensitive job assignments, information about employees' family members, and other personal data.