FBI Director Kash Patel says agents arrested another ShinyHunters suspect, at least the third detained in two weeks since the FBIjobs.gov breach. The group says it is leaving Telegram as members are arrested, and it has promised not to publish the FBI staff data it stole.
Perspective Coverage
14 publishers
- Builder
- Builder 23%
- Operator
- Operator 57%
- Investor
- Investor 20%
Reality
- Evidence62
- Adoption
- Not scored
- Hype gap+22
- Incentives68
- Confidence64
Intruders sat undetected in a Pentagon personnel file-transfer system for nine months
Unauthorized users stole data on about 3 million service members from the Defense Manpower Data Center and went undetected for nine months until July. A separate FBI breach surfaced weeks apart. Only the Pentagon case has a stated dwell time.
Publishers:this.weekinsecurity.com
Reality
- Evidence50
- Adoption
- Not scored
- Hype gap+5
- Incentives
- Not scored
- Confidence50
ANSSI traces theft of data on 600,000 French taxpayers and firms to stolen staff passwords
ANSSI says stolen staff passwords let an attacker take data on about 600,000 French taxpayers and firms, and the theft went undetected for seven weeks. Its report blames password-only portals, a flat government network and a reset that left the attacker's session open.
Reality
- Evidence72
- Adoption
- Not scored
- Hype gap0
- Incentives40
- Confidence68
ShinyHunters' no-leak promise leaves 2-3TB of stolen FBI data in its hands
ShinyHunters says it will never publish the 2-3TB of FBI data it took, allegedly through the agency's online jobs board. The agents whose records were taken still have to plan as if the files are loose, because the pledge covers only publication.
Reality
- Evidence45
- Adoption
- Not scored
- Hype gap+20
- Incentives75
- Confidence40
ShinyHunters calls its FBI ultimatum a marketing campaign
ShinyHunters says it will never publish or sell the 2TB to 3TB of FBI data it claims to hold and calls its one-week ultimatum a marketing campaign. The pledge leaves standing its unverified claim that an Oracle PeopleSoft zero-day got it in.
Reality
- Evidence30
- Adoption
- Not scored
- Hype gap+45
- Incentives70
- Confidence40
678,000 DGFiP records are being marketed with names, addresses and income figures together. France logged 33 of CertiK's 52 verified physical coercion attacks on crypto holders in H1 2026.
Reality
- Evidence58
- Adoption
- Not scored
- Hype gap+25
- Incentives40
- Confidence60
France's tax authority says an intruder used a stolen or misused identity to reach its systems in late June and extract data on individuals and businesses before access was cut.
Perspective Coverage
6 publishers
- Builder
- Builder 28%
- Operator
- Operator 62%
- Investor
- Investor 10%
Reality
- Evidence72
- Adoption
- Not scored
- Hype gap+10
- Incentives60
- Confidence68
Japan's Digital Agency put the GSS leak at 246,000 records 78 days after detecting it
An intruder inside the work platform shared by Japanese ministries took names, emails and phone numbers belonging to 246,000 staff and contractors, and the agency says none of it has shown up in a confirmed case of misuse.
Reality
- Evidence42
- Adoption45
- Hype gap+35
- Incentives62
- Confidence40