{ "version": 1, "event_id": "evt_a5fa3cb28a743bd6", "url": "https://xiyu.news/events/evt_a5fa3cb28a743bd6/", "json": "https://xiyu.news/api/events/evt_a5fa3cb28a743bd6.json", "type": "security_incident", "status": "monitoring", "category": "crypto", "title": { "zh": "加密货币黑客组织 ShinyHunters 称窃取了 5000 名 FBI 特工的数据", "en": "Crypto hacking group ShinyHunters says it stole data of 5,000 FBI agents" }, "current_state": { "zh": "ShinyHunters 声称已获取 FBI 一个数据库的访问权限，窃取了 5000 名特工的个人信息，包括家属资料、社会安全号码和任务安排，并于昨日向多家媒体分享了一份数据样本。路透社表示已能部分核实样本中的部分数据，并与其他特工（包括 FBI 局长卡什·帕特尔）的信息相匹配。\n\n路透社的部分核实使这一说法具备可信度；FBI 发言人称该组织是通过 Oracle 产品 PeopleSoft 的一个零日漏洞接触到 AWS GovCloud 服务器的，这指向了被广泛使用的企业软件中的一个缺陷。ShinyHunters 称此次窃取是为报复 FBI 一份关于该组织的报告，并给该局一周时间更正或撤下该报告。\n\nShinyHunters 还用宝可梦“月亮伊布”（Umbreon）的图片篡改了 FBI 的招聘页面。该组织对 404media 表示，此次窃取并非“出于经济动机”，并称：“我们打算做的不是勒索，也许算是胁迫。”", "en": "Crypto hacking collective ShinyHunters claims it breached FBI databases and stole personal details of 5,000 agents, sharing samples that Reuters partially verified, and says the theft was retaliation for a May 2026 FBI report on the group." }, "first_seen_at": "2026-09-23T17:21:31.929293+00:00", "last_updated_at": "2026-09-23T17:21:31.929293+00:00", "last_material_change_at": "2026-09-23T17:21:31.929293+00:00", "confidence": 0.75, "updates_count": 1, "sources_count": 1, "entities": [ "fbi", "hacking", "shinyhunters" ], "identifiers": [], "topics": [ "cybersecurity", "data-breach", "fbi", "hacking", "shinyhunters" ], "updates": [ { "update_id": "upd_74d96e8b428c4ab6", "event_id": "evt_a5fa3cb28a743bd6", "occurred_at": "2026-09-23T13:04:50Z", "published_at": "2026-09-23T13:04:50Z", "first_seen_at": "2026-09-23T17:21:31.929293Z", "time_precision": "published", "update_type": "initial", "material_change": true, "title_zh": "加密货币黑客组织 ShinyHunters 称窃取了 5000 名 FBI 特工的数据", "title_en": "Crypto hacking group ShinyHunters says it stole data of 5,000 FBI agents", "what_changed_zh": "ShinyHunters 声称已获取 FBI 一个数据库的访问权限，窃取了 5000 名特工的个人信息，包括家属资料、社会安全号码和任务安排，并于昨日向多家媒体分享了一份数据样本。路透社表示已能部分核实样本中的部分数据，并与其他特工（包括 FBI 局长卡什·帕特尔）的信息相匹配。\n\n路透社的部分核实使这一说法具备可信度；FBI 发言人称该组织是通过 Oracle 产品 PeopleSoft 的一个零日漏洞接触到 AWS GovCloud 服务器的，这指向了被广泛使用的企业软件中的一个缺陷。ShinyHunters 称此次窃取是为报复 FBI 一份关于该组织的报告，并给该局一周时间更正或撤下该报告。\n\nShinyHunters 还用宝可梦“月亮伊布”（Umbreon）的图片篡改了 FBI 的招聘页面。该组织对 404media 表示，此次窃取并非“出于经济动机”，并称：“我们打算做的不是勒索，也许算是胁迫。”", "what_changed_en": "Crypto hacking collective ShinyHunters claims it breached FBI databases and stole personal details of 5,000 agents, sharing samples that Reuters partially verified, and says the theft was retaliation for a May 2026 FBI report on the group.", "current_state_zh": "ShinyHunters 声称已获取 FBI 一个数据库的访问权限，窃取了 5000 名特工的个人信息，包括家属资料、社会安全号码和任务安排，并于昨日向多家媒体分享了一份数据样本。路透社表示已能部分核实样本中的部分数据，并与其他特工（包括 FBI 局长卡什·帕特尔）的信息相匹配。\n\n路透社的部分核实使这一说法具备可信度；FBI 发言人称该组织是通过 Oracle 产品 PeopleSoft 的一个零日漏洞接触到 AWS GovCloud 服务器的，这指向了被广泛使用的企业软件中的一个缺陷。ShinyHunters 称此次窃取是为报复 FBI 一份关于该组织的报告，并给该局一周时间更正或撤下该报告。\n\nShinyHunters 还用宝可梦“月亮伊布”（Umbreon）的图片篡改了 FBI 的招聘页面。该组织对 404media 表示，此次窃取并非“出于经济动机”，并称：“我们打算做的不是勒索，也许算是胁迫。”", "current_state_en": "Crypto hacking collective ShinyHunters claims it breached FBI databases and stole personal details of 5,000 agents, sharing samples that Reuters partially verified, and says the theft was retaliation for a May 2026 FBI report on the group.", "detailed_summary_zh": "Crypto hacking collective ShinyHunters claims it breached FBI databases and stole personal details of 5,000 agents, sharing samples that Reuters partially verified, and says the theft was retaliation for a May 2026 FBI report on the group.", "detailed_summary_en": "Crypto hacking collective ShinyHunters claims it breached FBI databases and stole personal details of 5,000 agents, sharing samples that Reuters partially verified, and says the theft was retaliation for a May 2026 FBI report on the group.", "background_zh": "ShinyHunters 是一个国际性黑帽黑客与勒索组织，自 2019 年起活跃，以窃取敏感数据并索取大额加密货币赎金而闻名。2024 年，该组织在窃取美国电话电报公司（AT&T）近 1.09 亿客户的数据后对其进行了勒索，AT&T 最终妥协并支付了近 6 枚比特币（当时价值 373,646 美元）。今年 1 月，该组织声称窃取了约会应用 Hinge、Match 和 OKCupid 的用户数据；5 月，四名法国男子因与该组织有关联被捕。", "background_en": "ShinyHunters is an international black-hat hacking and extortion group that has been active since 2019 and is known for stealing sensitive data and holding it for ransom in exchange for large sums of cryptocurrency. In 2024 it extorted AT&T after stealing data on almost all of its 109 million customers, and AT&T eventually paid almost six bitcoin (worth $373,646 at the time). In January it claimed to have stolen user data from the dating apps Hinge, Match and OKCupid, and four French men were arrested in connection with the group in May.", "community_discussion_zh": "", "community_discussion_en": "", "market_impact_zh": "ShinyHunters 的勒索活动历来以比特币结算，例如 2024 年 AT&T 的付款，因此该组织的活动会持续引发外界对加密货币作为赎金结算通道、以及对其反洗钱与合规审查的关注。此次声明的目标是政府机构而非加密市场基础设施，因此影响传导主要通过市场情绪和对支付通道的审视，而非通过某一具体代币或交易场所。", "market_impact_en": "ShinyHunters' extortion operations have historically been settled in bitcoin, as in the 2024 AT&T payment, so the group's activity keeps attention on crypto as a ransom settlement rail and on the AML and compliance scrutiny applied to it. The stated target here is a government agency rather than crypto market infrastructure, so any transmission runs through sentiment and payment-rail scrutiny rather than through a specific token or venue.", "importance_score": 7.5, "references": [ { "url": "https://www.bleepingcomputer.com/news/security/shinyhunters-claims-fbi-hack-data-theft-in-peoplesoft-zero-day-breach/", "title": "ShinyHunters claims FBI hack, data theft in PeopleSoft zero-day breach" }, { "url": "https://www.cbsnews.com/news/cybercriminal-group-fbi-data-shinyhunters/", "title": "Cybercriminal group claims it stole FBI personnel and... - CBS News" }, { "url": "https://en.wikipedia.org/wiki/ShinyHunters", "title": "ShinyHunters - Wikipedia" } ], "confidence": 0.75, "story_ids": [ "rss:protos.com_feed_:08b9d5372f71bab5" ], "sources": [ { "url": "https://protos.com/crypto-hacking-group-shinyhunters-says-it-stole-data-of-5000-fbi-agents/", "label": "Protos", "source_type": "rss", "official": false } ] } ] }