Vancouver Television · International

FBI arrests Canadian over ShinyHunters attack on FBI jobs portal, RCMP says

FBI arrests Canadian over ShinyHunters attack on FBI jobs portal, RCMP says

The RCMP says an FBI arrest in connection with the ShinyHunters hack of FBIjobs.gov took place earlier this week.

The Story

The RCMP says a Canadian has been arrested by the FBI in connection with the ShinyHunters cyberattack on FBIjobs.gov, a breach that the FBI says exposed sensitive and personal information on nearly all FBI employees.

FBI Director Kash Patel said the arrest of another co-conspirator was confirmed on Friday, and that it was linked to the hack of the bureau’s jobs portal. Patel said the FBI has been working to dismantle the group, pursue new leads and evidence, and move quickly.

Patel also said the ShinyHunters breach “occurred on a platform managed by a third-party vendor.” The FBI did not provide additional details about the arrest, including the person’s identity or what charges they may face.

RCMP spokesperson Ian Lordon said the RCMP is aware of the arrest of a Canadian in the U.S. connected to the ShinyHunters hack, and directed further questions to the FBI. Lordon added that the RCMP does not comment on investigations conducted by other countries.

ShinyHunters claimed responsibility for the hack and said it collected sensitive information. In its message, the group said it took action over what it described as false allegations in an FBI public advisory from May, which described ShinyHunters as a cyber criminal group specializing in large-scale data breaches and extortion.

The FBI advisory characterized ShinyHunters as threat actors who often use real or exaggerated claims of access to prompt payment, and who may harass or threaten people. It also described the group as possibly falsely claiming possession of sensitive or compromising information, including embarrassing photos or videos.

Experts said the information appearing to be compromised was the type of personal data routinely accessed in a breach, while noting the potential national security implications because the hack could expose agents and their families to extortion, swatting and other harassment, including because the identities of spouses were also said to have been obtained.

← More stories