FBI (US)
Threat actors publicly named in connection with targeting FBI. Sorted by IDF score (rarity-weighted CVE attribution) with extraction confidence as tiebreaker. Each row's evidence is a verbatim quote from the source attribution.
3 attributed actor(s) ·
Category mix: criminal=1, hacktivist=1, insider=1 ·
Attacker regions: US=2, International=1
| Actor | Category | Sponsor | Confidence | Evidence | CVEs | IDF | Last active |
|---|---|---|---|---|---|---|---|
| ShinyHunters (HACK-SHINYHUNTERS) | criminal | — | 0.75 | the group claimed a breach of the FBI's recruitment portal and demanded retraction of the FBI's 15 May 2026 IC3 public service announcement | 2 | 9.7 | 2026 |
| Kun Shan 'Joey' Chun (former FBI technician) (INS-CHUN-FBI-2017) | insider | 🇺🇸 US | 0.95 | disclosed FBI personnel, structure, and surveillance strategy to a PRC official. | 0 | 0.0 | — |
| RaidForums / BreachForums hacktivist ecosystem (HACK-RBN-DEFACEMENT-CREW) | hacktivist | 🇺🇸 US | 0.90 | targeting US government, FBI portals, and corporate breach data | 0 | 0.0 | — |
Sibling victims
Other named victims whose attacker circle overlaps with this one — defenders use this to find sectoral or geographic cohorts that face the same actors.
- AT&T — 1 shared actor(s)
- Ticketmaster — 1 shared actor(s)
- Santander Bank — 1 shared actor(s)
- LendingTree — 1 shared actor(s)
- Advance Auto Parts — 1 shared actor(s)
- Neiman Marcus — 1 shared actor(s)
- Bausch Health — 1 shared actor(s)
- Qantas — 1 shared actor(s)
- Allianz Life — 1 shared actor(s)
- Louis Vuitton — 1 shared actor(s)
« All victims · All actors · Browse by sector · Recent breach notifications