The FBI has arrested another suspect in the ShinyHunters hack of its own job recruitment website. Director Kash Patel confirmed the arrest Friday, calling it part of an ongoing push to “dismantle the group.” The bureau gave no name or location, but sources told CBS News the suspect is a Canadian citizen detained in Pennsylvania and believed to be directly involved.
Veteran agents say the September breach may be the worst of a federal government system since the 2015 Office of Personnel Management hack, which exposed more than 22 million records. ShinyHunters claimed responsibility, saying they stole 2–3 terabytes of FBI employee data through a new vulnerability in Oracle PeopleSoft.
The FBI’s cyber division says a review found that a contractor failed to apply a security patch to the targeted system, and that the contractor has since been removed. Reuters, citing sources, reported the individual worked for Accenture.
The Royal Canadian Mounted Police says it is aware of a Canadian arrested in the US over the hack but won’t comment on another country’s investigation. Other suspected co-conspirators remain at large. Two earlier arrests are tied to the group, in Jordan and Amsterdam — though the Amsterdam suspect went into custody on September 15, a week before ShinyHunters announced the FBI hack.
Source: CBS News
