Material update: Alleged FBI breach data includes psychiatric and medical records, Reuters partially authenticates samples

ShinyHunters says FBI personnel data it stole includes psychiatric evaluations, physical-exam information and other medical records. Reuters cross-checked credit data, career histories and a knowledgeable source to partially authenticate about six documents. The FBI is investigating but has not confirmed the trove's overall scale.

Full report

Reuters reported on September 25 that ShinyHunters shared about six sample documents with a small group of reporters, including a pre-employment psychiatric evaluation, physical-exam information and an electrocardiogram result. Reuters partially authenticated them by checking two Social Security numbers against credit data, matching an evaluation date to a former FBI analyst's career history and obtaining confirmation that a listed medical professional performed FBI evaluations at the time.

Reuters could not establish whether the limited files were representative of the alleged trove or whether more medical records existed. The FBI did not comment on the documents themselves and reiterated that it was aggressively investigating the reported breach.

The FBI told Reuters it was aware of cybercriminal claims that FBIjobs.gov was compromised and that personally identifiable information may have been affected. It is actively investigating and said the cause remains undetermined. That confirms the investigation, not the attackers' full account of the data, volume or source.

Reuters reported on September 23 that the roughly 5,000-line spreadsheet it reviewed included names, addresses, phone numbers, dates of birth, Social Security numbers and emergency contacts, along with assignments involving China, Russia, Iran and Hezbollah counterintelligence, communications interception, covert technical operations and human intelligence.

Reuters cross-checked details for more than 22 people against credit records and previous leaks and matched job descriptions for eight people to their career histories. Those checks strengthen the credibility of parts of the sample, but Reuters did not authenticate the entire dataset or establish that all of it came from the current FBIjobs.gov incident.

ShinyHunters claims it obtained two to three terabytes of data; the FBI has not confirmed that figure. The intrusion method, actual number affected, age of the records and individual-notification plans remain unknown. Readers should not download or redistribute suspected leaked personal data and can report related cybercrime through the FBI's IC3 channel.

Material update, September 25, 2026: added psychiatric, physical-exam and other medical-record samples, along with Reuters' partial-authentication methods and limits. Verification status: corrected/updated (the FBI investigation is confirmed; Reuters partially authenticated a limited sample, while the overall source, scale and the hackers' full claims remain unconfirmed). News value: A. Origin: United States. Primary section: Security. Related regions: worldwide. Latest source time: 20:32 UTC; N Globe update time: 22:28 UTC.

This report is an original summary based on verified sources, not a verbatim reproduction.