The FBI is investigating claims by the cybercrime group ShinyHunters that it breached systems containing sensitive information on about 38,000 bureau personnel and job applicants. The alleged theft could expose personal details and information about investigations, although the FBI has not confirmed whether its systems or a third-party provider were compromised.

ShinyHunters says the data includes names, roles, badge numbers, addresses, telephone numbers and information about spouses, as well as assignments involving Chinese spies, Russian intelligence and drug cartels. The group claims it exploited an Oracle cloud-storage vulnerability and is demanding that the FBI withdraw a May advisory describing it as a threat actor, threatening to release the alleged databases within a week; experts said the incident appears intended as retaliation and reputation management.