Hackers leak FBI agents' medical records, exposing allergies and spouse details

A black-hat collective known as ShinyHunters breached the FBI's Oracle PeopleSoft cloud storage, obtaining fitness-for-work medical examinations for more than 60,000 agents, applicants and senior officials. The stolen files include doctors' notes, blood and urine test results, and specific conditions such as shellfish and banana allergies and high cholesterol, as well as personal details about an agent's spouse. The group has shared portions of the data to pressure the FBI into withdrawing an advisory issued in May, rather than seeking monetary payment.

Security analysts stress that unlike passwords, medical records cannot be changed, making the leak permanently exploitable for phishing, identity fraud and targeted attacks on law-enforcement personnel. The FBI acknowledged the incident and said it is aggressively investigating the breach. The incident also revealed that the hackers accessed multiple FBI platforms, including FBIJobs, FBI BEAST, FBI MedLink and FBI BICS, raising concerns about the agency's overall cyber-security posture.