Sen. Wyden responds after digital extortion group breached FBI and stole data from employees, says ‘the FBI can’t even protect its own staff from being hacked’

Oregon – Oregon Sen. Ron Wyden is criticizing the FBI after the cybercriminal group ShinyHunters claimed it breached an FBI employment portal and obtained sensitive information belonging to bureau employees and job applicants.

“The FBI can’t even protect its own staff from being hacked. They can’t be trusted with the mass surveillance of Americans,” Wyden said Sept. 23 in response to Reuters’ report on the alleged breach.

The comments came after ShinyHunters claimed it had compromised FBIJobs.gov and stolen data involving thousands of current and prospective FBI employees. Reuters reported that the hackers claimed to have obtained information from the bureau, although the FBI had not immediately confirmed that the group successfully breached its systems.

The FBI later acknowledged that it was investigating the claims. According to CBS News, the bureau said it was aware of a cybercriminal group claiming a compromise of the FBIJobs.gov portal and an alleged impact involving personally identifiable information belonging to FBI employees. The FBI said the point of the breach remained undetermined and that investigators were working with third-party providers connected to the jobs website.

The FBIJobs.gov website was taken offline during the investigation, with a message indicating that the FBI’s application and special-agent applicant portals were unavailable.

ShinyHunters claimed it had obtained between 2 and 3 terabytes of data involving FBI and Justice Department personnel and applicants. The group also claimed that the information included highly sensitive details about FBI agents and people who had applied for jobs with the bureau.

Those claims have not all been independently verified. CBS News reported that some information provided by the hackers to news organizations appeared to correspond to real FBI or Justice Department personnel, although that did not establish that the information had actually been obtained from FBI systems.

The Associated Press similarly reported that the FBI was investigating the hackers’ claims and that the bureau had not determined whether the alleged breach originated within the FBI’s own enterprise or through a third-party provider. The AP reported that the hackers claimed to have information involving almost all FBI agents and people who had applied for jobs with the agency.

The reported breach has raised particular concerns because of the type of information that could potentially be exposed. The Washington Post reported that a sample of data allegedly provided by ShinyHunters included personal information connected to FBI employees, while experts warned that exposure of agents’ identities and information about their families could create risks involving harassment, extortion or swatting.

The incident also comes after other cybersecurity problems involving the FBI this year.

CBS News reported that the bureau disclosed suspicious cyber activity in March involving a system containing unclassified and law-enforcement-sensitive information. That system included information connected to surveillance operations and investigations. Later that month, hackers linked to Iran targeted the personal email account of FBI Director Kash Patel.

The latest incident has therefore renewed questions about the FBI’s cybersecurity protections as the agency continues to play a major role in federal surveillance and national-security investigations.

Wyden has long been involved in debates over government surveillance and Americans’ privacy rights. The Oregon senator has previously argued that federal agencies should face stronger restrictions when collecting Americans’ personal information and has pushed legislation and amendments aimed at limiting warrantless government access to sensitive data.

In the Senate, Wyden has also warned about government access to Americans’ internet browsing and search history, arguing that surveillance authorities should not be used to monitor law-abiding Americans without adequate safeguards.

His latest criticism connects those longstanding concerns with the reported cyberattack on the FBI itself. Wyden’s argument is that an agency responsible for collecting and handling sensitive information about Americans should first be able to demonstrate that it can adequately protect its own personnel and systems.

The FBI, however, has not publicly confirmed the full scope of the alleged breach. Its investigation has focused on determining whether unauthorized activity affected FBIJobs.gov and whether employee personally identifiable information was compromised.

The hackers also claimed that their actions were connected to a dispute with the FBI over a previous warning about ShinyHunters. The group objected to the bureau’s description of it as a cybercriminal organization involved in large-scale data breaches, extortion and harassment. CBS News reported that the hackers gave the FBI a deadline to change or remove portions of that earlier advisory.

As the investigation continues, the central question remains how much information, if any, was actually taken and whether the alleged intrusion involved FBI systems or a third-party provider.

For Wyden, the incident has become another example in his broader argument over government surveillance and data security. His criticism comes as the FBI investigates claims that hackers were able to gain access to information connected to the very employees responsible for protecting federal law-enforcement systems.

The FBI has not confirmed the hackers’ broader claims that they obtained information on thousands of agents and applicants, leaving the full extent of the alleged breach unresolved.