Agents fearful and angry after 'dangerous' FBI data breach

Current and former FBI agents have described feelings of fear, anger and disbelief after a cyberattack apparently exposed personal information belonging to the agency's entire workforce, according to BBC News.

A hacking collective known as ShinyHunters claims to have broken into FBI systems earlier this week and is threatening to release the stolen material within four days unless its demands are met. The group has told the BBC it wants the bureau to withdraw a security advisory issued in May that it says caused offense, rather than seeking a financial payout.

One former FBI cyber investigator told the BBC he remains in contact with serving agents through a group chat, where colleagues have voiced worry that their addresses, phone numbers and other private details could soon circulate among criminals and foreign intelligence operatives. He said some fear becoming targets of so-called "violence-as-a-service" schemes, in which young online gangs are paid to harass or intimidate individuals using leaked personal data.

Samples of the material shared with journalists reportedly include names, home addresses, phone numbers, badge numbers, job titles and details about agents' spouses, with records apparently tied to thousands of personnel, including senior figures such as deputy directors. BBC News says it has also reviewed leaked medical files described as "fitness-for-work" evaluations, containing blood and urine test results and physician notes referencing conditions such as high cholesterol, blood in urine, and a shellfish and banana allergy.

Michael McPherson, a former FBI agent now working in security operations at cyber firm ReliaQuest, said the breach strikes at the heart of agent safety and could put families at risk, since relatives are typically shielded from the dangers tied to the profession. He noted that having home addresses and contact details exposed changes that calculation significantly.

Cynthia Kaiser, formerly the FBI's deputy director of cyber and now head of a research center at Halcyon, said some of the stolen data already appears to be circulating among online groups before any formal release, meaning harm may already be occurring. She pointed out that material from earlier FBI breaches has continued to resurface on the dark web for years afterward.

Beyond personal safety concerns, sources told the BBC there are worries about national security risks, including the possibility that hostile intelligence services could try to exploit the leaked information to recruit or pressure bureau employees.

Several agents also expressed frustration with the FBI itself, describing the security failures that allowed the breach as sloppy, and questioning how an agency with such extensive resources could suffer this kind of exposure. One former agent said leadership's guidance, which reportedly included recommending staff sign up for a personal-data-removal service called DeleteMe, felt insufficient given the scale of the incident.

ShinyHunters is not considered an especially sophisticated hacking operation, and the group has previously been linked to attacks on companies including Rockstar Games and the educational platform Canvas. Its willingness to communicate openly with journalists via Telegram has added to the sense of embarrassment among agents, with one former employee suggesting the bureau has struggled to effectively counter younger cybercriminal networks.

The FBI has not issued a public response to interview requests but acknowledged the breach on Wednesday, stating it is actively investigating how the intrusion occurred, according to BBC News. McPherson said he expects the bureau to pursue the perpetrators aggressively, while Kaiser described the hackers' actions as reckless and predicted a significant law enforcement effort to hold them accountable.

The incident adds further pressure on FBI Director Kash Patel, whose tenure has already drawn scrutiny, as the bureau faces questions over how it will respond if the stolen data is published as threatened.