The FBI has removed an Accenture contractor after a data breach exposed sensitive personal details of thousands of its employees. The bureau says the breach happened because a contractor did not install a critical security update on a system run by a third party. Two sources told reporters the removal took place on October 5,2026.
FBI cyber chief Brett Leatherman said the bureau's review found a security failure of a platform managed by a third party organization. He said that happened after a contractor failed to apply a security patch that had been issued to protect the platform. He added that the FBI has removed the contractor and taken steps to limit further risk and protect its workforce.
In late September, the FBI said it knew of a cybercriminal group claiming it had broken into FBIJobs.gov portal and affected employees' personal information. The bureau said it was actively and aggressively investigating. The group is named as ShinyHunters. It claims to have stolen tens of thousands of files, but that claim has not been independently confirmed in full.
Leaked samples reported in the media appear to include names, addresses, phone numbers, badge numbers, job titles and family details. It also includes medical and psychiatric records, counterintelligence job descriptions and street addresses of human-intelligence operatives. The exact number of people affected and exact types of data stolen have not been confirmed as of now.
The breach appears to involve the FBI's jobs and HR systems and not its core investigative databases. Even so, the data is unusually sensitive. Current and former agents have said they feel shocked, afraid and angry. Exposed addresses and job details could put employees and their families at risk of harassment or targeting.
The case highlights how one missed update on a contractor-run system can put information about intelligence staff at risk. It also puts a spotlight on how well government agencies watch over contractors and apply security patches on time.
The FBI has not yet disclosed whether more contractors or systems were involved or whether any of the data has been misused. Anyone affected is expected to learn more as the investigation continues.
