Cyber News Dark Reading 1 week ago

What We Missed: FBI Strikes Back at ShinyHunters

CN
CyberNew Threat Research Desk
• Original Reporting: Dark Reading
CyberNew Threat Intel Assessment
Assessed Severity: INFORMATIONAL
Impacted Surface
Enterprise Data & Identity Stores
Intelligence Sector
Cyber News

Analyst Takeaway

"After ShinyHunters claimed a breach against the FBI and defaced its website, a suspected member of the cybercrime gang was detained in Jordan. In this episode of "What We Missed," Dark Reading's Rob Wright and Alex Culafi discuss some of the recent news events and topics that didn't make it into the publication, starting with ShinyHunters ' supposed breach against the FBI. The group recently..."

Recommended Defense & Mitigation

  • Threat Monitoring: Ingest published IOCs into SIEM/EDR detection rules for continuous telemetry monitoring.
  • Security Awareness: Alert staff and maintain baseline endpoint hardening across endpoints.
Curated & Verified by CyberNew Threat Intelligence Desk Standard Defense Framework (NIST / MITRE ATT&CK)

After ShinyHunters claimed a breach against the FBI and defaced its website, a suspected member of the cybercrime gang was detained in Jordan.

In this episode of "What We Missed," Dark Reading's Rob Wright and Alex Culafi discuss some of the recent news events and topics that didn't make it into the publication, starting with ShinyHunters' supposed breach against the FBI.

The group recently claimed, without evidence, that it obtained data belonging to nearly every FBI employee and job applicant. This purportedly happened as part of a breach of a third-party jobs portal used by the FBI, in which the gang vandalized the site and claimed to have stolen the aforementioned data.

Earlier this month, Jordanian authorities detained a suspected member of ShinyHunters; as first reported by Reuters, the alleged member is apparently cooperating with officials. The FBI has responded aggressively to this recent incident involving the bureau, cooperating with Dutch authorities to arrest another suspected member of the gang last month.

Related:Carbonato Botnet Puts an AI Agent on Hacked Docker Hosts

ShinyHunters, a loose collective of financially motivated threat actors, has claimed a swath of attacks in recent months against entities including ReliaQuest, Instructure, and even fellow threat group Cl0p.

Also discussed on this episode: Hackers gained access to a reportedly unencrypted Defense Manpower Data Center file-sharing system for roughly nine months, from October 2025 until this past July 16, exposing Pentagon records on nearly 2.8 million living people and 294,000 deceased people tied to the US military; and the Dutch Institute for Vulnerability Disclosure (DIVD) disclosed a hack involving several unidentified zero-day vulnerabilities.

For all of our Dark Reading news videos, please check out our YouTube channel and our curated video articles.

What We Missed With Rob Wright & Alex Culafi: Full Transcript

This transcript has been edited for clarity and length by Informa TechTarget's internal AI assistant. For the full experience, please watch the video.

Source Verification & Original Intelligence

This threat report was reviewed by CyberNew analysts and cross-referenced with primary security disclosures from Dark Reading.

Primary Advisory →