The attackers claim to have exfiltrated 2 to 3 TB of data, which Reuters verified includes sensitive psychiatric and medical evaluation records. The breach occurred via an unpatched Oracle PeopleSoft zero-day vulnerability (CVE-2026-35273) with a CVSS score of 9.8. ShinyHunters stated the attack was a retaliatory "marketing initiative" in response to a May FBI report that made false allegations about the group's tactics.
Tuesday, October 20, 2026
Story
FBI Confirms All Employee Data Stolen Including Psychiatric Records
Cybersecurity22 days ago
The Federal Bureau of Investigation has issued a warning to its staff regarding the exposure of Social Security numbers and home addresses following a hack of its job portal. An internal memo declares the event a "cyber security incident" and admits the bureau is operating under the premise that the personally identifiable information of all employees and job applicants was stolen by the cybercrime group ShinyHunters.
Looking for more context or analysis?
Tilt chat provides reliable, tailored insights, alerts, and automations.