FBI job portals remain offline after ShinyHunters claims breach via PeopleSoft zero-day

The FBI's job application portals, apply.fbijobs.gov and fbijobs.gov/special-agents, remain down after extortion group ShinyHunters claimed to have breached them using an Oracle PeopleSoft zero-day. The group also says it compromised FBI-managed servers hosted on AWS GovCloud, exfiltrating personnel files and medical records of current, former, and prospective agents from systems including FBIJobs, FBI BEAST, FBI MedLink, and FBI BICS. ShinyHunters claims the hack was retaliation against an FBI public advisory urging victims not to pay ransoms, and is threatening to leak the data unless the Bureau withdraws its statements. Separately, Google Cloud's Mandiant reported that ShinyHunters has revived and tweaked its exploit for Oracle PeopleSoft CVE-2026-35273 — first abused as a zero-day against schools earlier in 2026 — now bypassing WAF defenses with URL-encoding tricks to hit the PSEMHUB endpoint across education, tech, healthcare, agriculture, transport, and government targets.