Tornado WatchGeneva, AL, Houston, Bay, FL, Calhoun, Dixie, Franklin, Gadsden, Gulf, Holmes, Jackson, Jefferson, Lafayette, Leon, Liberty, Madison, Taylor, Wakulla, Walton, Washington, Brooks, GA, Decatur, Grady, Lowndes, Seminole, Thomas, Hamilton, Suwannee, Echols · Until 9:00 PM ET today
Details3 active
CBS NEWS · NEWS REPORT

FBI arrests suspected member of ShinyHunters in connection with breach of bureau's jobs website

The FBI this week arrested another individual suspected of being connected to ShinyHunters, the cybercriminal group that hacked the bureau's job website, FBI Director Kash Patel said.

Washington — The FBI this week arrested another individual suspected of being connected to ShinyHunters, the cybercriminal group that hacked the bureau's job website and stole personal data about its employees, FBI Director Kash Patel said on Friday.

"This is the latest arrest this FBI has made in a matter of days involving this network, as we work non-stop to dismantle the group, pursue new leads and evidence, and act quickly," Patel said in a statement. "This arrest demonstrates the strength and reach of our efforts to protect Americans from cybercrime."

The FBI did not provide any additional details on the individual's identity or the location of the arrest, but a U.S. official and another source briefed on the matter told CBS News the suspect was detained in Pennsylvania.

A law enforcement source said the suspect is a Canadian citizen and is believed to be directly involved in the hack of the FBI's website. That source said that other suspected co-conspirators remain at large.

The sources were granted anonymity to speak about law enforcement details that have not been made public.

The New York Times reported earlier Friday that the suspect was arrested in Pennsylvania on suspicion of being involved in the theft of FBI data.

An FBI spokesperson declined to comment on the details outlined in the New York Times report.

In a statement to CBS News, the Royal Canadian Mounted Police said it "is aware of the arrest of a Canadian in the US in connection with the ShinyHunters hack. The RCMP does not comment on investigations being conducted by other countries."

CBS News has reached out to other Canadian authorities for comment.

The FBI's jobs website was hacked in September, in what some veteran agents are saying may amount to the worst breach of a federal government system since the infamous hack of the Office of Personnel Management system in 2015, when more than 22 million government records were stolen.

ShinyHunters claimed responsibility for the FBI hack, the latest in a series of high-profile data breaches committed by the notorious group.

The hackers said they stole 2 to 3 terabytes of data related to FBI workers, a feat they accomplished thanks to a new vulnerability with Oracle PeopleSoft, a human resources management program.

Earlier this week, the FBI's Cyber Division's Assistant Director Brett Leatherman announced that following a review, the bureau determined that a contractor failed to implement a security patch to the system that was targeted.

"The FBI has removed the contractor and taken all necessary steps to both mitigate any further risk and protect our workforce," Leatherman said in a statement.

Reuters was the first to report on the contractor's removal, saying the individual worked at the company Accenture.

The arrest announced on Friday is the latest in a string of arrests of suspects who are believed to be tied to ShinyHunters.

On Sunday, CBS News reported that Jordanian authorities detained Saif al-Din Khader, who uses the online moniker "Rey" and is suspected to be involved in ShinyHunters.

A second suspected member of the group, identified as 24-year-old Pepijn van der Stap, was also arrested in Amsterdam, CBS News previously reported.

However, he was taken into custody on Sept. 15, meaning he was already in custody days before ShinyHunters announced it had hacked the FBI jobs website. The intrusion was first reported on Sept. 22 by 404 Media.

MYVLD ON YOUR PHONE

Install myVLD when you are ready.

Use your browser’s Install app or Add to Home Screen option. On iPhone and iPad, open the Share menu and choose Add to Home Screen.

You can come back to this anytime from Menu → Install myVLD.

NOTIFICATIONS

Stay connected to South Georgia.

Get important myVLD updates on this device even when the app is closed. New notification categories start enabled; you can change what you receive at any time.

Checking this device…
Notification soundChoose the myVLD chime used while the PWA is open. Lock-screen/background notifications use the sound allowed by your phone or browser.
PermissionChecking…
Background deliveryChecking…
Lock-screen soundChecking…

Checking this device…

No account is required for this device to receive all-device and emergency broadcasts. Sign in if you want category-by-category choices and quiet hours.

MYVLD NOTIFICATION

myVLD update

Open details
SOUTH GEORGIA

Explore myVLD