// UNCLASSIFIED // CLEARED FOR PUBLIC RELEASE //
FILE BRC-newsDTG 0600Z
ColdRecon / Breach Radar / FBI
Breach Record

FBI

DISCLOSED 2026-09-26 · UNPATCHED CVE

The ShinyHunters extortion gang claims to have breached FBI systems using a new Oracle PeopleSoft zero-day vulnerability. They allegedly gained access to internal services and stole sensitive data on employees and job applicants.

The record

What we know

Disclosed
2026-09-26
Attack vector
Unpatched Cve
Sector
Government
Country
USA
Domain
fbi.gov
Data classes exposed
employee datajob applicant data
Sources

Cited reporting

↗ bleepingcomputer.com
Similar vector · recent

Other unpatched cve breaches on file

Japan's Digital Agency · 2026-09-18 Gyazo · 2026-09-18 Japan's Digital Agency · 2026-09-17 U.S. government agencies · 2026-09-16 Japan's shared government network · 2026-09-15 Gyazo · 2026-09-11 PaperCut · 2026-09-11 IDScan.net · 2026-09-10

This page is the permanent ColdRecon entry for the FBI disclosure. It updates if new public reporting emerges. All tracked breaches →

FBI just lived through this. Your next prospect doesn't have to.

ColdRecon turns every disclosed breach into a daily intelligence brief from the seller's seat — normalized to the factors that move a deal, written in the Handler's voice. Request clearance and the first lands tomorrow at 0600.

Request Clearance →