ShinyHunters' FBI Haul Includes Psychiatric and Medical Records

Documents partially authenticated by Reuters show the stolen FBI data contains mental health evaluations and medical files, deepening counterintelligence fears.

ShinyHunters, the hacking crew that first claimed on September 22 that it had breached the FBI, has now revealed that its stolen trove includes sensitive psychiatric and medical evaluation records of bureau personnel. The group circulated a small set of medical files to reporters after announcing it had broken into the fbijobs.gov site and taken what it claimed was 2 to 3 terabytes of data. The BBC reported that a blood and urine test document was among the sample, and Reuters has now found other sensitive files, including a mental health evaluation, in the leaked set. The FBI has declined to comment on the records specifically, saying only in a September 23 statement that it was 'aggressively investigating' the reported breach.

Reuters reviewed roughly half a dozen files and partially authenticated several of them. One record from a 'fitness for duty' exam for prospective employees noted an applicant took aspirin daily and was allergic to dust and cats. Another said a prospective employee had exhibited 'symptoms of depression' in high school, and a third carried an electrocardiogram result. Reuters verified the material by running two social security numbers against credit bureau data, matching a pre-employment mental health evaluation date against a former FBI analyst's LinkedIn profile, and matching an FBI psychiatrist's name and job title to a LinkedIn profile. Reuters could not establish whether these files represent the wider trove ShinyHunters claims to hold.

Eric O'Neill, a former FBI operative who founded the consultancy Nexasure AI, told Reuters that the presence of medical data signals the hack is approaching the magnitude of the 2015 Office of Personnel Management intrusion, which exposed millions of Americans' sensitive clearance information allegedly to Chinese intelligence. He said the records would be a powerful magnet for hostile spies, remarking that he 'would be shocked if Russian intelligence isn't knocking on their door' demanding the material. The stolen data already includes granular details on FBI employees and assignments, including sensitive work against Chinese spies, Russian intelligence and drug cartels.

ShinyHunters told Reuters that its stolen data was 'very very very sensitive' and included medical information, discharges, prescriptions, clinical visits and 'any health issues with Agents.' The group claims it compromised several internal services, including the FBI's background and employee applicant screening system, FBI MedLink, which contains personnel medical records, and the Background Investigation Contract Services unit. Reuters could not corroborate those specific allegations. An FBI advisory from May warned that the group has previously exaggerated its level of access to extort victims, so the true scope of the breach remains uncertain.

The group initially demanded the FBI retract its May advisory in exchange for the data, but it has since removed that defiant statement from its website, saying on September 24 it would not comment on what it would do 'if the victim does not comply with our kind request.' That softening leaves open questions about whether the group intends to publish, sell or quietly monetize the files. Meanwhile, the FBI's investigation continues, and security experts warn that if the medical and psychiatric records are genuine, foreign intelligence services could use them to identify, pressure or target bureau personnel — turning a data breach into a live counterintelligence problem.