A cybercrime group’s claim to hold data on every FBI employee and applicant is alarming as a crime. For America’s adversaries, it could be something more: a ready-made targeting file on the people who catch spies.

TechCrunch put it directly: the theft “could present a major counterintelligence threat, where agents and their families are extorted into cooperating with a foreign government.”

A notorious hacking group says it has broken into the FBI and stolen personal data on the bureau’s entire workforce. “We hacked the FBI. We hold data on all FBI employees and applicants,” the group, ShinyHunters, told 404 Media, which first reported the claim on Tuesday, September 22.

If the claims hold up, it would be one of the most damaging breaches ever of a U.S. law-enforcement agency.

What the hackers showed

To back up the claim, the group gave 404 Media a sample of about 5,000 records. It contains names, home addresses, phone numbers, dates of birth and spouse information. Axios reported that the stolen data allegedly also includes agent status, email addresses and spouses’ Social Security numbers.

404 Media checked the sample with the lookup tool OSINT Industries, which matched phone numbers to names, and another tool showed some numbers belonged to Justice Department personnel. The group also defaced FBIjobs.gov, the bureau’s recruiting site, with a message that read “this site has been seized by ShinyHunters” and claimed “All FBI data was compromised including PII/PHI,” meaning personal and health information. Screenshots of the defaced page and the sample spread quickly online.

Boston Made will not publish, link to or describe any individual’s stolen information.

How they say they got in

A ShinyHunters representative told 404 Media the group “used a zero day exploit in an Oracle product called PeopleSoft,” meaning a previously unknown flaw, in HR and recruiting software. From there, they said, they moved into Amazon Web Services GovCloud servers and downloaded two to three terabytes of data. TechCrunch described the same path, from a PeopleSoft server to a government cloud holding agents’ and applicants’ records. None of these technical claims has been confirmed by the FBI.

What they want

“This is not financially motivated,” the representative told 404 Media, adding that the group’s plans were “maybe coercion” rather than extortion. According to TechCrunch and Axios, the group is demanding that the FBI retract a published report about the group that it says contains false allegations.

The FBI’s response

“The FBI is aware of claims regarding unauthorized activity affecting FBIjobs.gov and is currently investigating,” a spokesperson said. Axios could not independently verify how authentic or recent the data is, though security researchers said the attack appears legitimate. TechCrunch noted it would be the second known breach of FBI systems this year, after earlier compromises involving wiretap systems and FBI Director Kash Patel’s personal email.

What experts say

• “The data is out there and has likely been repeatedly downloaded and passed around to other threat actors,” said Allan Liska of Recorded Future (Axios).
• Andrew Brandt of Huntress warned that “employees or their families could be threatened or harmed” if criminals or nation-states get the data.
• Former FBI cyber official Cynthia Kaiser said the bureau will “marshal additional resources” to bring those responsible to justice.

For what this could mean in the hands of foreign spy services, read our Masterpass briefing on the counterintelligence fallout.

For most of its life, Boston Made has been known as a family of brands — a newsroom, a pet company, a web studio, a markets publication. Over the past several weeks, that description has stopped being complete. Across the ecosystem, the company has shipped a connected set of software platforms, and the brands are increasingly the front doors to them.

This is a guide to what has launched, what each product does, and how the pieces connect.

Intelligence: ATLAS, SCOUT and BOSSTOX

The most significant change is at the flagship address. BostonMade.com now runs ATLAS, a paid business-intelligence platform for tracking companies, people, properties, contracts and market activity from a single protected workspace. ATLAS is offered in Individual, Pro and Business plans billed through Stripe, and its workspace stays locked until a subscription is active.

Alongside it sits BOSSTOX, which describes itself as the evidence layer beneath the AI buildout. The platform tracks power, cooling, compute, networking and financing signals, and it separates each stage of a project — contracted, financed, energized, installed and revenue-producing — so that no stage is inferred from an earlier announcement.

Feeding both is SCOUT, the Paxton-Digital collection layer that gathers public filings, company releases, government records and source citations, and surfaces intellectual-property and competitive signals.

Scout collects the evidence. The BOSSTOX graph normalizes it. Reader explains it, and Fenway Web packages it.

Access: the Boston Made App and Keystone

The Boston Made App has become the front door to the whole network: a guided directory of 17 properties across eight categories, the latest wires from this newsroom, and the Boston Made+ membership at $20 a month or $120 a year. Native iOS and Android apps are listed as coming soon.

At the top of the stack, Kingswell Strategic Ventures has introduced Keystone, which bundles SCOUT, ATLAS, BOSSTOX, the Fenway Web Builder, Boston Made Membership and a Keystone-exclusive Realty + Parking Operations Monitor under a single master pass. Keystone is currently available by private briefing, and its access tiers are published as proposed rather than final.

Building and reading: Fenway Web and Reader

Fenway Web has relaunched as a website generator. Visitors describe what they do, choose a direction and a tone, and receive a first draft they can revise, preview on desktop and mobile, and export. Plans start free.

Boston Made Reader collects the latest from every Boston Made site into a single, book-style reading experience, with adjustable type, multiple languages and a free library of founding documents and sacred texts. No login is required to browse.

Consumer marketplaces: Lumo

Lumo.gold has been rebuilt as a consumer-first directory for people selling gold, silver, coins and estate jewelry in the United States and United Kingdom, with an introduction service that connects sellers to vetted local buyers.

The Boston Made Newsroom will cover each of these platforms in more depth as they develop. A live overview of every product is available on the newsroom’s new Software & Technology page.