What to know about Special agents blood and urine test results stolen in FBI hack
Special agents' blood and urine test results stolen in FBI hack - Published Cyber-criminals who hacked the FBI say they have extremely sensitive medical data for thousands of its special agents.
Claims checked12
Techniques found0
Topics0
Coverage spectrum
Coverage gap: Low Left coverage
Left0%
Center86%
Right14%
7 sources compared across this story cluster. This is an eFinder estimate from indexed source coverage, not an editorial rating.
What happened
Special agents' blood and urine test results stolen in FBI hack - Published Cyber-criminals who hacked the FBI say they have extremely sensitive medical data for thousands of its special agents.
Why it matters
BBC News has seen samples of the stolen "fitness-for-work" medical examinations, which contain information such as blood and urine test results, and doctors' notes mentioning conditions such as a "shellfish and banana allergy".
Common ground
The records include agents' full names and addresses, as well as references to medical concerns including 'blood in the urine' and 'high cholesterol'.
Perspective signals
No major persuasion pattern has been attached yet, so the source, headline, and evidence should carry most of the weight for readers.
Follow-up questions
What concrete event or decision sits underneath the headline: Special agents blood and urine test results stolen in FBI hack?
What evidence would most clearly confirm or weaken the claim that The group claims it exploited a vulnerability in an Oracle cloud storage system used by the FBI, gaining access to multiple platforms including FBIJobs, FBI BEAST, which handles background checks on employees and applicants, FBI MedLink, which stores medical records, and FBI BICS, which contains investigative information?
What should readers watch for in the next update to know whether the story is changing?
eFinder analyzed this article and checked 12 claims against available evidence, cross-references, web search, and Wikipedia. Here is what the fact-checking layer found.
check_circleCorroborated7
schedulePending2
infoSingle Source2
verifiedVerified By Reference1
schedule
Claim 1: “The group claims it exploited a vulnerability in an Oracle cloud storage system used by the FBI, gaining access to multiple platforms including FBIJobs, FBI BEAST, which handles background checks on employees and applicants, FBI MedLink, which stores medical records, and FBI BICS, which contains investigative information.”
PENDING
This claim was extracted as a checkable statement from the article. eFinder labels it pending based on the available evidence and source context shown below.
info
Claim 2: “the hackers now claim the number could be far higher... now claims to hold sensitive information on around 60,000 current and former FBI staff.”
SINGLE SOURCE
The specific claim that the number of affected staff could be as high as 60,000 is mentioned in one web search result citing the hackers' claims, but is not corroborated by other independent sources in the provided evidence.
menu_book
wikipedia
NEUTRAL
— BreachForums, sometimes referred to as Breached, was an English-language black-hat hacking crime forum. The website acted as an alternative and successor to RaidForums following its shutdown and seizu…
https://en.wikipedia.org/wiki/BreachForums
menu_book
wikipedia
NEUTRAL
— Scattered Lapsus$ Hunters, sometimes referred to as UNC6040 and UNC6395, is a cybercrime supergroup also known and referred to as "Trinity of Chaos". The supergroup is an international extortion-focus…
https://en.wikipedia.org/wiki/Scattered_Lapsus$_Hunters
menu_book
wikipedia
NEUTRAL
— ShinyHunters is a black-hat criminal hacker and extortion group that has been active since 2019 and is said to have been involved in a significant number of data breaches.
ShinyHunters has utilized c…
https://en.wikipedia.org/wiki/ShinyHunters
check_circle
Claim 3: “the hackers are not demanding money. Instead, they are seeking a retraction of an FBI advisory published in May”
CORROBORATED
Two independent sources explicitly state that ShinyHunters is not demanding money but is instead seeking the retraction of an FBI advisory published in May.
menu_book
wikipedia
NEUTRAL
— BreachForums, sometimes referred to as Breached, was an English-language black-hat hacking crime forum. The website acted as an alternative and successor to RaidForums following its shutdown and seizu…
https://en.wikipedia.org/wiki/BreachForums
menu_book
wikipedia
NEUTRAL
— Scattered Spider, also referred to as UNC3944 and more recently identified as ShinyHunters, is a hacking group mostly made up of teens and young adults believed to live in the United States and the Un…
https://en.wikipedia.org/wiki/Scattered_Spider
menu_book
wikipedia
NEUTRAL
— ShinyHunters is a black-hat criminal hacker and extortion group that has been active since 2019 and is said to have been involved in a significant number of data breaches.
ShinyHunters has utilized c…
https://en.wikipedia.org/wiki/ShinyHunters
+ 3 more evidence sources
schedule
Claim 4: “In a statement posted on X, the FBI said it was still trying to determine whether the hackers had breached its systems directly or compromised a third-party provider.”
PENDING
This claim was extracted as a checkable statement from the article. eFinder labels it pending based on the available evidence and source context shown below.
check_circle
Claim 5: “The cyber-criminal group ShinyHunters claims it breached FBI systems on Monday, and later posted details of the attack on its darknet site.”
CORROBORATED
Multiple sources identify the hacking group ShinyHunters as the party claiming responsibility for the breach of FBI systems/portals.
menu_book
wikipedia
NEUTRAL
— The following is a list of events of the year 2026 in the United States, as well as predicted and scheduled events that have not yet occurred.
July 4, 2026 was the 250th anniversary of the signing of …
https://en.wikipedia.org/wiki/2026_in_the_United_States
menu_book
wikipedia
NEUTRAL
— dark0de, also known as Darkode, was a cybercrime forum and black marketplace described by Europol as "the most prolific English-speaking cybercriminal forum to date". The site, which was launched in 2…
https://en.wikipedia.org/wiki/Dark0de
menu_book
wikipedia
NEUTRAL
— Hack Forums (often shortened to 'HF') is an Internet forum dedicated to discussions related to hacker culture and computer security. The website ranked as the number one website in the "Hacking" categ…
https://en.wikipedia.org/wiki/Hack_Forums
+ 3 more evidence sources
check_circle
Claim 6: “The records include agents' full names and addresses, as well as references to medical concerns including 'blood in the urine' and 'high cholesterol'.”
CORROBORATED
Web search results confirm the stolen records reportedly include names, home addresses, and specific medical details such as blood and urine test results.
travel_explore
web search
NEUTRAL
— The records reportedly included agents’ names, home addresses, and Social Security numbers.The bureau has not publicly confirmed the full scope of the information allegedly obtained by ShinyHunters. F…
https://truthpress.com/news/kash-patel-announces-major-arres…
travel_explore
web search
NEUTRAL
— Official site of the Federal Bureau of Investigation. Investigative priorities, news, the Most Wanted list, and how to submit a tip.Please contact your local FBI office to submit a tip or report a cri…
https://www.fbi.gov/contact-us
travel_explore
web search
NEUTRAL
— Exposure of sensitive bureau staffing data could pose profound counterintelligence risks. For employees who do not publicly identify themselves as working for the FBI, the exposure could reveal both t…
https://www.nextgov.com/cybersecurity/2026/09/stolen-fbi-dat…
check_circle
Claim 7: “The records appear to relate to thousands of agents, including senior officials such as deputy directors.”
CORROBORATED
Reports indicate the data relates to thousands of agents and includes sensitive medical information, with some sources mentioning the breadth of the personnel affected.
web search
NEUTRAL
— Official site of the Federal Bureau of Investigation. Investigative priorities, news, the Most Wanted list, and how to submit a tip.Records requests or information: FBI Records/FOIA. Jobs, internships…
https://www.fbi.gov/contact-us
Claim 8: “ShinyHunters is an international hacking collective that has been active since 2019 and has been linked to a number of high-profile cyber-attacks, including incidents affecting Rockstar Games and the education platform Canvas.”
VERIFIED BY REFERENCE
Wikipedia confirms that ShinyHunters is a black-hat criminal hacker and extortion group active since 2019 involved in significant data breaches.
menu_book
wikipedia
NEUTRAL
— The following is a list of albums, EPs, and mixtapes released in the first half of 2021. These albums are (1) original, i.e. excluding reissues, remasters, and compilations of previously released reco…
https://en.wikipedia.org/wiki/List_of_2021_albums_(January–J…
wikipedia
NEUTRAL
— ShinyHunters is a black-hat criminal hacker and extortion group that has been active since 2019 and is said to have been involved in a significant number of data breaches.
ShinyHunters has utilized c…
https://en.wikipedia.org/wiki/ShinyHunters
check_circle
Claim 9: “Cyber-criminals who hacked the FBI say they have extremely sensitive medical data for thousands of its special agents.”
CORROBORATED
Multiple independent sources, including BBC News and reports mentioned in web searches, confirm that cyber-criminals (ShinyHunters) claim to have stolen extremely sensitive medical data for thousands of FBI special agents.
travel_explore
web search
NEUTRAL
— An alleged hack of FBI personnel files includes "extremely sensitive medical data for thousands of its special agents," and "blood and urine test results" are among stolen records, according to a repo…
https://ae.headtopics.com/news/extremely-sensitive-medical-d…
travel_explore
web search
NEUTRAL
— Hackers Claim Massive FBI Data Breach. ShinyHunters, a criminal hacking and extortion group, previously claimed responsibility for stealing sensitive personal information through the FBI’s employment …
https://truthpress.com/news/kash-patel-announces-major-arres…
travel_explore
web search
NEUTRAL
— "The FBI is aware of a cyber-criminal enterprise group claiming a compromise of the FBIJobs.gov portal and alleged impact to FBI employee personally identifiable information," a spokesperson for the F…
https://www.yahoo.com/news/us/articles/trove-stolen-sensitiv…
check_circle
Claim 10: “Reuters reports that some of the data includes information on agents, external involved in investigations relating to Russia, China and drug cartels.”
CORROBORATED
Both Nextgov/FCW and a report citing Reuters confirm that the exposed data includes analysts/agents working on investigations related to Russia, China, and drug cartels.
travel_explore
web search
NEUTRAL
— Exposed analysts work on areas including China, Russia and electronic surveillance. ShinyHunters claimed responsibility for the breach this week. The FBI said it’s investigating.
https://www.nextgov.com/cybersecurity/2026/09/stolen-fbi-dat…
travel_explore
web search
NEUTRAL
— The news agency Reuters reports that some of the data includes information on agents, external involved in investigations relating to Russia, China and drug cartels.
https://vijayachronicle.com/story/special-agents-blood-and-u…
travel_explore
web search
NEUTRAL
— FBI Director Kash Patel announced another major arrest in the investigation of the ShinyHunters hacking group, which is suspected of stealing sensitive personal information belonging to FBI agents and…
https://truthpress.com/news/kash-patel-announces-major-arres…
info
Claim 11: “Reporting by 404 Media suggests details of a previously little-known FBI hacking unit may also have been exposed”
SINGLE SOURCE
The claim regarding a 'previously little-known FBI hacking unit' is specifically attributed to reporting by 404 Media in the evidence provided; other sources discuss the breach but not this specific unit.
travel_explore
web search
NEUTRAL
— Reporting by 404 Media suggests details of a previously little-known FBI hacking unit may also have been exposed, external. It was initially thought the breach affected the FBI's 38,000 current employ…
https://vijayachronicle.com/story/special-agents-blood-and-u…
travel_explore
web search
NEUTRAL
— Hacker prison. The FBI has arrested another suspected member of the ShinyHunters extortion group believed to be involved in the recent breach of FBI systems, Director Kash Patel announced Friday.
https://www.bleepingcomputer.com/news/security/fbi-arrests-a…
Claim 12: “on Wednesday it acknowledged the breach and said it was "aggressively investigating" how it happened.”
CORROBORATED
The FBI acknowledged the claims regarding unauthorized activity affecting FBIjobs.gov and stated they are investigating, as reported in multiple web search results.
menu_book
wikipedia
NEUTRAL
— The director of the Federal Bureau of Investigation is the head of the Federal Bureau of Investigation (FBI), a United States federal law enforcement agency, and is responsible for its day-to-day oper…
https://en.wikipedia.org/wiki/Director_of_the_Federal_Bureau…
menu_book
wikipedia
NEUTRAL
— FBI True is an American documentary television series that provides an in-depth look at real-life FBI investigations, featuring firsthand accounts from agents who worked on high-stakes cases involving…
https://en.wikipedia.org/wiki/FBI_True
menu_book
wikipedia
NEUTRAL
— Federal Bureau of Investigation v. Fazaga, 595 U.S. 344 (2022), was a United States Supreme Court case dealing with the use of law enforcement surveillance under the Foreign Intelligence Surveillance …
https://en.wikipedia.org/wiki/Federal_Bureau_of_Investigatio…
+ 3 more evidence sources
infoDisclaimer: This analysis is generated by AI and should be used as a starting point for critical thinking, not as definitive truth. Claims are verified against publicly available sources. Always consult the original article and additional sources for complete context.