FBI Breach Extended to 8000 Local Law Enforcement Officers as Agents Blame Incompetence

A source is testimony, not proof. Citing one is a provenance fact — it records who said what, where — and never a verification that the claim is true.

Who is named

The characters and things this document talks about — 8 in alls. Each links to everything else the record knows about them.

Claims made

Every claim in this document. Firsthand = asserted on its own basis; secondhand = recounted from elsewhere, carrying no independent weight.

• The intrusion hit the FBIJobs.gov portal through an Oracle PeopleSoft vulnerability on September 23

  ShinyHunters claimed the intrusion on September 23, saying it hit the FBIJobs.gov portal through an Oracle PeopleSoft

  FBIJobs.gov portal Oracle PeopleSoft

  Untested — nothing else bears on it yet

• The breach exposed personal data on nearly every FBI employee and on more than 8,000 state and local officers assigned to FBI task forces

  the breach exposed personal data on nearly every FBI employee and on more than 8,000 state and local officers assigned to FBI task forces

  Untested — nothing else bears on it yet

• Task force officers were victims and are being notified

  task force officers were victims and are being notified

  Untested — nothing else bears on it yet

• The incident was attributed to a third-party vendor platform failure

  the incident was attributed to a third-party vendor platform failure

  Untested — nothing else bears on it yet

• The cause was incompetence, involving a patched vulnerability that missed an avenue and data moved to an internet-facing system

  One FBI cyber agent called the cause "incompetence," saying a patched vulnerability had a missed avenue and the data had been moved to an internet-facing system

  Untested — nothing else bears on it yet

• ShinyHunters claimed to have 2 TB of data, including FBI medical records

  ShinyHunters separately claimed 2 TB of data, including FBI medical records

  ShinyHunters

  Untested — nothing else bears on it yet

• Full public release of the FBI employee dataset within the next 30 days is unlikely

  Full public release of the FBI employee dataset within the next 30 days is unlikely

  Untested — nothing else bears on it yet

• China and Russia can exploit data on nearly every FBI employee and more than 8,000 task force officers without a leak, so the counterintelligence exposure persists

  Either way, China and Russia need no leak to exploit data on nearly every employee and more than 8,000 task force officers, so the counterintelligence exposure persists

  China Russia

  Untested — nothing else bears on it yet

• The FBI's acknowledgment changes the breach status from an unproven claim to a confirmed compromise

  The FBI's acknowledgment moves this from unproven claim to confirmed compromise

  FBI

  Untested — nothing else bears on it yet

• ShinyHunters stated its motive is to force the FBI to retract an advisory

  its stated motive here, forcing the FBI to retract an advisory, is unusual for the group

  FBI ShinyHunters

  Untested — nothing else bears on it yet

• Wikipedia publishes the full dataset

  → Wikipedia publishes the full dataset.

  Wikipedia

  Untested — nothing else bears on it yet

• ShinyHunters gave 404 Media a sample of about 5,000 employee records

  gave 404 Media a sample of about 5,000 employee records

  404 Media ShinyHunters

  Untested — nothing else bears on it yet

No claims match this filter.

Syndication

Who is repeating whom. This is shown as structure, and it is the reason a chorus never moves a belief bar: forty tellings of one assertion are still one.

• possibly restates Israel just quadrupled its PR budget to $730M, experts claim it won’t work unconfirmed

What it cost

Reading this document into the graph cost <$0.01.

12 claims in all. Content fingerprint 2f85d154f262… — the document's text itself is not republished here; follow the link above to read it at its source.