FBI Arrests Another ShinyHunters Suspect Reportedly Involved in Its Jobs Portal Hack
FBI arrests a Canadian citizen in Pennsylvania linked to the ShinyHunters data breach.
The FBI has arrested a Canadian citizen in Pennsylvania, suspected of involvement in the ShinyHunters data breach that compromised sensitive information on nearly all FBI agents and job applicants. This marks the third public arrest related to the incident, following detentions in the Netherlands and Jordan. The breach reportedly stemmed from a contractor's failure to apply a critical security patch to an external platform, possibly Oracle's PeopleSoft.
AI summary of the linked source. Not reviewed by an editor. How this works
Run Oracle?
Get an email when a new story names Oracle, usually within the hour.
Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch worksPrivacy
The lesson from this incident
Full lessonThe ShinyHunters breach of the FBI's jobs portal illustrates the devastating consequences of failing to apply critical security patches to externally facing systems. A third-party contractor's negligence in patching what is believed to be Oracle's PeopleSoft platform created an exploitable entry point into systems containing highly sensitive data on nearly all FBI agents and job applicants. This incident underscores that an organization's security posture is only as strong as its weakest vendor link. When contractors handle sensitive government data, their patch compliance and security hygiene must be held to the same rigorous standards as internal teams. The ongoing arrests demonstrate the serious legal and reputational fallout that follows such breaches, but the damage to affected individuals cannot be undone.
What helps against this
How we list vendors
- Vulnerability scanning and prioritisation
You know which systems are vulnerable, and which ones to fix first.
- Automated patch management
Known holes get closed in days, not months.
- Third-party risk management (TPRM)
You know which suppliers could hurt you, and you hear quickly when one of them is breached.