Cyber-criminals who breached the FBI’s systems have obtained sensitive medical and personal information for thousands of special agents. The stolen data includes full names, addresses, and medical records, such as blood and urine test results, highlighting the potential for blackmail, identity fraud, and other targeted attacks.

Experts warn that the permanence of such data makes it particularly valuable. Once compromised, the records cannot be reset, leaving the agents vulnerable for years to come. The hackers, known as ShinyHunters, are demanding a retraction of an FBI advisory and threaten to publish the full dataset unless their demands are met.

While the FBI is investigating, the scale of the breach remains uncertain. ShinyHunters claim to have data on around 60,000 current and former FBI staff, significantly more than initially thought. The group believes it exploited a vulnerability in an Oracle cloud storage system.

The incident has raised concerns over the security of sensitive information in the US law enforcement community. It could also impact other high-profile hacking units within the FBI, potentially exposing sensitive investigative details.

The FBI’s response has been cautious, acknowledging the breach and stating it is working with third-party providers to mitigate risks. However, the potential for serious harm to agents and the public remains a significant concern.