Special agents' blood and urine test results stolen in FBI hack

Image source, Anadolu via Getty ImagesByJoe Tidy World Service Cyber Correspondent Published2 hours agoCyber-criminals who hacked the FBI say they have extremely sensitive medical data for thousands of its special agents.

BBC News has seen samples of the stolen "fitness-for-work" medical examinations, which contain information such as blood and urine test results, and doctors' notes mentioning conditions such as a "shellfish and banana allergy".

The records include agents' full names and addresses, as well as references to medical concerns including 'blood in the urine' and 'high cholesterol'.

Experts say the hack - which the FBI is investigating - could leave agents vulnerable to scams, blackmail and targeted attacks, as well as help criminals impersonate law enforcement officers.

"The list maps thousands of agents against their medical and fitness records," said Etay Maor, vice-president of threat intelligence at Cato Networks.

"Passwords can be reset if stolen, but medical records cannot, so once this data is out, it stays compromised for good. That permanence, applied across an entire workforce, is what makes this leak so serious."

The FBI has not responded to requests for comment. However, on Wednesday it acknowledged the breach and said it was "aggressively investigating" how it happened.

The cyber-criminal group ShinyHunters claims it breached FBI systems on Monday, and later posted details of the attack on its darknet site.

The group also shared samples of the alleged stolen data with reporters, along with an extortion demand.

Unusually, the hackers are not demanding money. Instead, they are seeking a retraction of an FBI advisory published in May, which they claim "offended" them.

The samples shared with journalists appear genuine and include names, addresses, phone numbers, badge numbers, job titles and information about spouses.

The records appear to relate to thousands of agents, including senior officials such as deputy directors.

Professor Ciaran Martin, the former head of the UK's National Cyber Security Centre, has described the hack - if confirmed - "as serious as it gets when it comes to data breaches."

The news agency Reuters reports that some of the data includes information on agents, external involved in investigations relating to Russia, China and drug cartels.

Reporting by 404 Media suggests details of a previously little-known FBI hacking unit may also have been exposed, external.

It was initially thought the breach affected the FBI's 38,000 current employees, but the hackers now claim the number could be far higher.

The group says it underestimated the scale of the data theft and now claims to hold sensitive information on around 60,000 current and former FBI staff.

Jamie Akhtar, chief executive and co-founder of CyberSmart, said the hackers' claims should be treated with caution but that the breach appeared to be extremely concerning.

"Such data could be used for highly convincing phishing, impersonation, identity fraud, blackmail or even operations targeting law-enforcement personnel, making the potential implications particularly serious," he said.

The hackers, who communicate with reporters in English via the messaging service, Telegram, say they will publish the full dataset in five days unless the FBI meets their demands.

ShinyHunters is an international hacking collective that has been active since 2019 and has been linked to a number of high-profile cyber-attacks, including incidents affecting Rockstar Games and the education platform Canvas.

The group claims it exploited a vulnerability in an Oracle cloud storage system used by the FBI, gaining access to multiple platforms including FBIJobs, FBI BEAST, which handles background checks on employees and applicants, FBI MedLink, which stores medical records, and FBI BICS, which contains investigative information.

In a statement posted on X, the FBI said it was still trying to determine whether the hackers had breached its systems directly or compromised a third-party provider.

"We are actively and aggressively investigating this matter and working closely with those third-party providers that support FBIJobs.gov to mitigate any and all risk," the statement said.

FBI investigating claim hackers have stolen details of all its agents

Published1 day agoInternational cyber attack disrupts swathe of universities and schools

Published9 MayGTA-maker Rockstar Games hacked again but downplays impact

Published13 AprilSign up for our Tech Decoded newsletter to follow the world's top tech stories and trends. Outside the UK? Sign up here.

Watch our pick of standout clips from across the BBC

PreviousNext1:09What are the charges against Manchester City? 00:01:09, play videoWhat are the charges against Manchester City?0:35Rory Stewart on his viral Newsnight moment. 00:00:35, play videoRory Stewart on his viral Newsnight moment1:37Question Time panel clash over welfare policy. 00:01:37, play videoQuestion Time panel clash over welfare policy1:06BBC boss warns some channels and radio stations may close. 00:01:06, play videoBBC boss warns some channels and radio stations may close0:49Greece urges UK to return Parthenon sculptures. 00:00:49, play videoGreece urges UK to return Parthenon sculptures0:43What was on the menu at the White House state dinner? 00:00:43, play videoWhat was on the menu at the White House state dinner?1:02How we know this is an altered photo. 00:01:02, play videoHow we know this is an altered photo0:47Why Gen-Z are ditching cardio for weights. 00:00:47, play videoWhy Gen-Z are ditching cardio for weights1:09Why has half of this house disappeared? 00:01:09, play videoWhy has half of this house disappeared?1:15FA Cup assistant ref says tumours ended his career. 00:01:15, play videoFA Cup assistant ref says tumours ended his career0:57Inside the Trump-Xi White House dinner. 00:00:57, play videoInside the Trump-Xi White House dinner1:09Would you chase a friend for £5? 00:01:09, play videoWould you chase a friend for £5?1:09No advantage for 'nepo-babies': Zeta-Jones. 00:01:09, play videoNo advantage for 'nepo-babies': Zeta-Jones0:52A rapid new test to help brain tumour patients. 00:00:52, play videoA rapid new test to help brain tumour patients1:04New GCSE subjects for teens in England. 00:01:04, play videoNew GCSE subjects for teens in England1:10Protests over eviction of 87-year-old. 00:01:10, play videoProtests over eviction of 87-year-old2:09'My partner raped me while I was sleeping' 00:02:09, play video'My partner raped me while I was sleeping'1:00Police warn of rise in vape spiking. 00:01:00, play videoPolice warn of rise in vape spiking1:21'Miracle' device easing teens Tourette symptoms. 00:01:21, play video'Miracle' device easing teens Tourette symptoms1:20Children found to have ketamine bladder damage. 00:01:20, play videoChildren found to have ketamine bladder damageTop storiesLive. Man City found guilty of majority of 115 financial rule breaches - sources tell BBC

What could the potential sanctions for Man City be?

Special agents' blood and urine test results stolen in FBI hack

Just how hot and dry was your summer? Use our postcode lookup to find out

Treadmills to deadlifts: Why Gen Z are swapping cardio for strength training

From weeks to hours - the rapid new test transforming brain tumour diagnosis

What are my children exposed to? Why I want testing for cancer-causing chemicals

From Nagaland to a path to the Oscars: Indian film brings a rarely seen world to global cinema

'We're all broke': Would you chase a friend for £5?

The Papers: 'Xi urges rivals to coexist in peace' and 'It's on at last'

Why Trump gave Xi an ornate bald eagle statue at the state dinner

Ministers reject dog ownership licence scheme

Anne Hathaway and Jessica Chastain star in a psychological thriller

How many dead people are on the internet?

The hit podcast explores Thomas More's iconic text 'Utopia'

Was Colin Norris wrongly convicted of killing his patients?

Daniel Thomas pleads not guilty after dinghy slashed

Some BBC channels and radio stations may well have to close, director general says

Noah Woods left playground through gap in fence, inquest hears

Jay-Z rape accuser says her allegation was false

Ed Sheeran's next US concerts cancelled due to bad weather

'Heartbreaking': The man set to lose his home due to the UK's £5bn theme park

Special agents' blood and urine test results stolen in FBI hack

NHS to suspend staff suspected of snooping on patient records

Jeffrey Donaldson victim describes 'profound impact' of child sex abuse

Xi got Trump's red carpet welcome - but not everything he wanted