ShinyHunters conducted the theft of 2 TB to 3 TB of data as a retaliatory act to force the FBI to retract a second-quarter 2026 'FLASH report' that made allegations about the group's tactical operations. The group exploited a CVSS 9.8 vulnerability (CVE-2026-35273) that the FBI had failed to patch on time. While the hackers told 404 Media they do not intend to publish the stolen files, bureau employees and partner agents have reported contacting news outlets to verify if their private information was compromised.
