'Management Is Lost': Kash Patel's FBI Reels From Massive Hack Exposing Agents' Home Addresses, Sensitive Jobs

The FBI is scrambling to contain one of its most serious data breaches in years after hackers allegedly stole data that exposed employees' home addresses and details of sensitive intelligence assignments, prompting frustration from personnel who say they lack clear guidance.

About a week after the cybercriminal group ShinyHunters claimed to have breached systems connected to FBIJobs.gov, the bureau is still determining the full extent of the compromise and exactly how attackers gained access.

'Management is lost,' one former FBI agent who remains in contact with former colleagues told CNN. 'They're not providing any clear advice to agents.'

The FBI disputes the suggestion that employees have been kept uninformed, saying potentially affected workers have received multiple notifications and that teams have been working '24/7' on the response.

Home Addresses and Sensitive Assignments Exposed

The stolen material reportedly includes Social Security numbers, personal addresses, emergency contacts, and other identifying information.

More troubling from a national security perspective, Reuters reported that a sample contained names and job assignments for personnel working on sensitive matters involving China, Russia, Iran and Hezbollah, as well as surveillance and human-intelligence operations.

Reuters verified portions of the dataset but could not authenticate all of it or establish that every listed assignment was current.

ShinyHunters claims it obtained information on almost all FBI agents, as well as job applicants. The bureau has not confirmed that sweeping claim.

The FBI has confirmed that it is investigating claims of a compromise involving its jobs portal and the alleged exposure of employee personally identifiable information, while saying investigators have not yet determined whether the breach occurred within FBI infrastructure or through a third-party provider.

Agents Fear for Their Families

The exposed addresses have created an immediate safety concern for personnel whose work depends on keeping their identities and assignments relatively private.

Sources familiar with the response told CNN that some agents fear exposing their home addresses could endanger their families while they are travelling.

Officials are also concerned that foreign intelligence services or criminal organisations could use the stolen information to identify agents working undercover or in sensitive roles.

There are also fears that the information could be combined with data from previous breaches to identify personnel involved in counterintelligence, organised crime and other sensitive investigations.

Such concerns are not theoretical. A Justice Department watchdog found that in 2018, a hacker working for a Mexican drug cartel tracked an FBI official in Mexico City using phone and surveillance-camera data.

According to the FBI case agent cited in the watchdog report, the cartel used the information to intimidate and, in some cases, kill potential sources or cooperating witnesses.

ShinyHunters Says It Will Not Publish Data

ShinyHunters initially demanded that the FBI amend or remove a May advisory describing the group as specialising in large-scale breaches and extortion.

The group has since claimed it never intended to publicly release or sell the stolen FBI information and described the operation as a non-financial campaign against what it considers inaccurate descriptions of its activities.

That claim cannot be independently verified, and the group has acknowledged that it cannot control what happens to samples of the data already shared with journalists.

ShinyHunters has previously leaked information stolen from other victims, while samples of the alleged FBI data have already been provided to news organisations.

Pentagon Hit by Separate Massive Breach

The FBI incident comes alongside a separate breach at the Pentagon's Defense Manpower Data Center, which exposed records belonging to about 2.76 million living people and another 294,000 deceased individuals.

The compromised Pentagon data included names, Social Security numbers, contact information and military job specialities.

Officials said unauthorised users accessed the system between October 2025 and July 2026, although there is currently no evidence the information has been misused. No reported connection exists between the Pentagon breach and the FBI incident.