With reference to the cyberattack on FBIjobs.gov, consider the following statements: 1. The breach reportedly exploited a zero-day vulnerability in the Microsoft PeopleSoft platform. 2. The stolen data included names, agent status, email addresses, and Social Security numbers. 3. The hacking group ShinyHunters claimed to have stolen over 2 terabytes of sensitive data. Which of the statements given above is/are correct?

'Almost all agents' data stolen? Hackers claim they breached FBI jobs site, stole 2TB of data

GS3Economy · S&T · Environment · Security· Cyber security· Prelims· 23 September 2026

Cybersecurity and zero-day vulnerabilities: a GS3 Internal Security case study on infrastructure risks.

Why in news

The hacking group ShinyHunters claimed to have breached the FBI's job application website (FBIjobs.gov) and stolen over 2 terabytes of sensitive data from employees and applicants.

Background

The breach targeted the Special Agent applicant portal, which was reported unavailable on Tuesday. The hackers claimed to have accessed names, agent status, email addresses, phone numbers, home addresses, and Social Security numbers of spouses.

Facts for Prelims

S&TThe breach allegedly exploited a zero-day vulnerability in Oracle’s PeopleSoft platform.
FactThe hacking group ShinyHunters claimed to have stolen over 2 terabytes of data.
BodyThe FBI (Federal Bureau of Investigation) is the US agency whose job portal was breached.

Prelims practice question

With reference to the cyberattack on FBIjobs.gov, consider the following statements:

The breach reportedly exploited a zero-day vulnerability in the Microsoft PeopleSoft platform.
The stolen data included names, agent status, email addresses, and Social Security numbers.
The hacking group ShinyHunters claimed to have stolen over 2 terabytes of sensitive data.

Which of the statements given above is/are correct?

(a)1 only
(b)2 only
(c)2 and 3 only
(d)1, 2 and 3

Show answer

Answer: (c) 2 and 3 only — Statements 2 and 3 are correct. Statement 1 is incorrect: The note states the vulnerability was in Oracle's PeopleSoft platform.

For Mains

Q. Discuss the security implications of zero-day vulnerabilities in enterprise software and the risks posed to national security infrastructure by cyber-espionage.

Dimensions to cover in your answer

Infrastructure vulnerability: Risks of using third-party enterprise platforms for sensitive government personnel data
Data integrity: Potential for targeted harassment or blackmail of federal agents via leaked PII
Attribution challenges: Difficulty in identifying non-financially motivated state-sponsored vs independent cyber actors

Keywords: zero-day vulnerability · cyber-espionage · data breach · cybersecurity infrastructure

Read the full news →Report a mistake in this note How notes are made Source: Times of India ↗Also: GS2 · e-Governance & citizen services Also: GS3 · IT, AI, semiconductors & computing

More Internal Security notes

Half of Indian cybercrime victims complain to police, 27% pay bribes · 30 September 2026
Coast Guard nabs ₹3,000 crore drug haul from Iranian boat off Lakshadweep · 30 September 2026
Cybercrime Soars 17.9% as Scams Hit Over Half of Indians · 30 September 2026
In August 2026, the Supreme Court asked Union Ministries to address doxxing and deepfakes · 30 September 2026
Delhi Police files 398-page chargesheet in minor’s bus rape, Supreme Court takes notice · 30 September 2026
Highly Educated Indians Fall Prey to Cyber Fraud During Stress, Study Finds · 30 September 2026

All Internal Security current affairs →

Something wrong, or something missing?

Spotted a mistake in a note, or want a topic, format or PDF that would help your preparation? Write to us. We read every mail and fix errors fast.

Report a mistake →Ask for something →[email protected]

This note is generated automatically from SatyaDheesh's news feed and mapped to the UPSC CSE syllabus. Check facts against the original report or PIB before using them in an answer.