Under Kash Patel, the Agency Responsible for Counterintelligence Suffered One: Hackers Claiming to Have Breached the FBI Said They Stole Data on Thousands of Its Employees — Home Addresses, Dates of Birth, Social Security Numbers, Emergency Contacts, and, in Some Cases, the Sensitive Intelligence, Counterespionage, and Surveillance Assignments They Hold, Including Cases Touching China, Russia, Iran, and Hezbollah
In late September and early October 2026, the hacking group ShinyHunters claimed it had breached the FBI and stolen data on thousands of its employees — in the group's telling, on "every FBI employee." Journalists were shown a spreadsheet of roughly 5,000 alleged FBI personnel records containing names, home addresses, phone numbers, dates of birth, Social Security numbers, and emergency contacts — and, for some, their field-office assignments and the sensitive intelligence, counterespionage, and surveillance work they do, including cases involving China, Russia, Iran, and Hezbollah. Security experts called it a counterintelligence disaster: exposing where agents live and what adversaries they work against is precisely the information a hostile service would kill for. The FBI confirmed a cybersecurity incident; a suspected member of the group was detained in Jordan and is reportedly cooperating. And it does not stand alone. This is the FBI that, earlier in 2026, had its DCSNet wiretap-surveillance network penetrated — a breach security researchers tied to the Chinese state group Salt Typhoon and the bureau labeled a "major incident" — and whose own director, Kash Patel, had his personal email hacked by an Iran-linked group. The agency charged with protecting the nation's secrets keeps failing to protect its own, under a director who, as this archive has documented, purged its experienced ranks, lowered its hiring standards, and churned through its leadership. You cannot run a counterintelligence service as a loyalty project and expect it to keep the counterintelligence.