FBI Investigates Data Breach Exposing Medical Records of Thousands of Agents

FBI Data Breach Confirmed

The FBI is investigating a data breach where cyber-criminals claim to have stolen highly sensitive medical and personal data of thousands of its special agents. The breach was acknowledged by the FBI, which stated it is "aggressively investigating" the incident.

Sensitive Information Compromised

Samples of the stolen data, seen by BBC News, include "fitness-for-work" medical examinations with blood and urine test results, doctors' notes detailing conditions like allergies, and references to medical concerns such as 'blood in the urine' and 'high cholesterol'. The records also contain agents' full names, addresses, phone numbers, badge numbers, job titles, and information about spouses. Some data reportedly includes agents involved in investigations related to Russia, China, and drug cartels, and potentially details of an FBI hacking unit.

Threats and Demands

The cyber-criminal group ShinyHunters claimed responsibility for the breach, stating it occurred on Monday. The group posted details on its darknet site and shared data samples with reporters. Unusually, the hackers are not demanding money but instead seek the retraction of an FBI advisory published in May, which they claim "offended" them.

Potential Impact on Agents

Experts, including Etay Maor from Cato Networks, warn that the hack could leave agents vulnerable to scams, blackmail, and targeted attacks, as medical records are permanently compromised once leaked. The breach could also assist criminals in impersonating law enforcement officers. Professor Ciaran Martin, former head of the UK's National Cyber Security Centre, described the confirmed hack as "as serious as it gets when it comes to data breaches."