FBI investigating claims that a major cybercrime group stole sensitive personnel data

A notorious cybercrime group is claiming they stole more than 2 terabytes of data that includes detailed personal information about thousands of FBI employees and job applicants.

Why it matters : Cybercriminals and state-sponsored attackers have penetrated U.S.

IT systems for years, but stealing detailed and sensitive information about FBI employees is brazen, cyber experts told Axios.

Cybercriminals are known to trade leaked information on the dark web, a prospect that would leave the data up for grabs from the highest bidder.

Driving the news : ShinyHunters, a group that's broken into numerous institutions, said in a post on its dark-web site Tuesday that it stole "very sensitive data on almost ALL FBI agents and individuals who filed an application with the FBI for a job." An FBI spokesperson said in a statement the bureau is "aware of claims regarding unauthorized activity affecting FBIjobs.gov and is currently investigating." What to watch : Cynthia Kaiser, a former top official in the FBI's cyber division, told Axios that when a hacker targets the FBI, expect the bureau "to marshal additional resources to bring them more quickly to justice." The big picture : While the breach is likely to bring more law enforcement attention to ShinyHunters in the short term, the long tail impact is greater on the FBI employees and their families whose information was stolen, Allan Liska, a threat intelligence analyst at Recorded Future, told Axios.

"The data is out there and has likely been repeatedly downloaded and passed around to other threat actors," Liska said.

Axios has not been able to corroborate that the data stolen is legitimate or recent, but cybersecurity researchers confirmed that the attack appears legitimate.

404 Media obtained a sample of the stolen data, which appears to include information about 5,000 alleged agents.

Zoom in : ShinyHunters told Axios in an email that the stolen data includes names, FBI agent statuses, emails, phone numbers, home addresses and "sometimes even spouse information," including their Social Security numbers.

The group also claims it broke into the FBI's criminal justice, HR and other services.

ShinyHunters also said it seized and defaced the FBI's jobs webpage via a zero-day in Oracle's PeopleSoft platform.

The site was still offline as of Tuesday afternoon.

Screenshot: FBI career page on Sept.

22.