FBI Arrests Canadian Suspect in ShinyHunters Data Hack Investigation

The FBI arrested a Canadian citizen in Pennsylvania on suspicion of helping carry out the ShinyHunters hack of the bureau’s jobs portal, which exposed sensitive personal information linked to nearly all FBI employees, according to officials familiar with the investigation.

The arrest was announced Friday by FBI Director Kash Patel as part of an international effort to dismantle the hacking group and its associates. The suspect’s identity and specific charges were not immediately released.

The FBI said the breach involved FBIjobs.gov and occurred through a platform managed by a third-party vendor. ShinyHunters claimed responsibility last month, saying it obtained sensitive employee data.

"This is the latest arrest this FBI has made in a matter of days involving this network, as we work non-stop to dismantle the group, pursue new leads and evidence, and act quickly," said Kash Patel, FBI director.

Patel said the investigation was continuing across countries as authorities pursued additional leads connected to the hacking network.

"This arrest demonstrates the strength and reach of our efforts to protect Americans from cybercrime," said Kash Patel, FBI director.

"We will continue to work closely with our partners to disrupt what’s left of the ShinyHunters group and their associates, no matter where they operate," said Kash Patel, FBI director.

Patel also confirmed that the breach "occurred on a platform managed by a third-party vendor," describing the incident as part of the bureau’s ongoing cybersecurity investigation.

"Cyber criminal group specializing in large-scale data breaches and extortion," stated the FBI advisory describing ShinyHunters.

The FBI advisory characterized ShinyHunters as a group involved in large-scale breaches and threats involving stolen information.

"Threat actors," stated the FBI advisory describing ShinyHunters.

"Use their real or exaggerated claims of access to sensitive or personal information to prompt payment from victims," stated the FBI advisory describing the group’s tactics.

"May falsely claim to have sensitive or compromising information, including embarrassing photographs or videos of victims, which frequently do not exist," stated the FBI advisory describing ShinyHunters’ methods.

The FBI said the stolen information could create risks for agents and their families, including possible harassment and exposure of personal details. Experts noted the breach involved data that is commonly targeted in cyber incidents but remained sensitive because of the affected employees’ roles.

"The RCMP is aware of the arrest of a Canadian in the U.S. in connection with the ShinyHunters hack," said Ian Lordon, RCMP spokesperson.

The Royal Canadian Mounted Police directed further questions about the arrest to the FBI and did not provide additional investigative details.

"The RCMP does not comment on investigations being conducted by other countries," said Ian Lordon, RCMP spokesperson.