The FBI says it has arrested another suspected member of the ShinyHunters extortion group, the gang it blames for a breach of the bureau’s own jobs website. FBI Director Kash Patel announced the arrest on Friday, 9 October, in a post on X.
Patel said agents made the arrest earlier in the week. He described ShinyHunters as the group believed to be responsible for the FBIjobs.gov incident, which happened on a platform run by a third-party vendor. He did not name the suspect, say where the arrest took place or announce charges, according to a report syndicated by Fox 17.
What is known about the suspect
Details come from news reports rather than the FBI. According to The Hacker News, which cited The New York Times and CBS News, the suspect is a Canadian citizen who was arrested in Pennsylvania. A law enforcement source told CBS News the person is believed to have been directly involved in the hack.
The FBI has not confirmed that. Patel’s post does not say whether the suspect took part in the breach, and an FBI spokesperson declined to comment on the Times report. No charges have been made public. The same source told CBS that other suspected co-conspirators remain at large.
Reuters counts this as the third publicly announced arrest since news of the breach emerged in late September, The Hacker News reports. The arrest follows an earlier FBI announcement that Dutch police had detained an alleged ShinyHunters leader, per Fox 17.
The breach itself
ShinyHunters said in September that it had stolen sensitive data on nearly all FBI agents and job applicants. Reuters reported that a sample the group shared contained agents’ names, home addresses, Social Security numbers, assignments and, in some cases, the names of family members. As Fox News noted, the scale of the alleged theft has not been independently confirmed.
ABC News reports that the bureau has said the breach was discovered in late September and involved personnel records. The FBI has said the compromise sat with a third-party vendor’s platform, not its core systems, based on Patel’s description.
ShinyHunters is a cyber-extortion crew. As Fox 17 describes it, the group hacks companies, steals data and threatens to publish it on the dark web unless it is paid.
Patel said the FBI would keep working with partners to “disrupt what’s left of the ShinyHunters group”. Arrests may slow the group, but stolen data does not return to its owners. Anything already copied can still be sold, leaked or used for fraud.
What to do if your data may be in a breach
Few readers applied for an FBI job. But the pattern here, a third-party vendor holding personal records, is common, and the advice applies widely.
- Expect targeted phishing. Stolen names, addresses and job details make fake emails and calls more convincing. Treat unexpected messages about your account, application or finances with suspicion.
- Do not use contact details in the message. Find the organisation’s official number or website yourself and verify there.
- Freeze your credit. If a Social Security number or national ID number may have leaked, a credit freeze is free in the US and blocks most new-account fraud.
- Change reused passwords. Use a unique password for each account and turn on multi-factor authentication, preferably with an app or hardware key rather than text messages.
- Ignore extortion threats. If someone claims to hold your data and demands payment, do not pay. Keep the message and report it to local police or the relevant national cybercrime reporting service.
- Watch your statements. Check bank and card activity, and review your credit reports for accounts you did not open.
What remains unclear
Several questions are open. The FBI has not said how many records were taken, how the vendor platform was compromised or whether any data has been published. The identity of the arrested man and any charges are also unknown.
For now, the bureau’s account is limited to a short statement. Further detail would probably come from court filings if charges are unsealed.