GTA 6 NEWS · SECURITY
The Hacker Group That Hit Rockstar Now Claims It Breached the FBI — 8 Weeks Before GTA 6
The most unwanted recurring character in the GTA 6 saga is back. ShinyHunters — the hacking group that demanded a ransom from Rockstar Games earlier this year and threatened to leak stolen studio data — now claims it has breached the United States Federal Bureau of Investigation, declaring: "We hacked the FBI. We hold data on all FBI employees and applicants."
Yes, that FBI. The agency whose seizure banner the group allegedly mocked when it defaced the FBI's own jobs site. With GTA 8 weeks from launch, the circle connecting Rockstar's biggest security headaches to federal cybercrime enforcement just closed into a loop — and it's worth understanding exactly what's claim, what's verified, and what it means for November 19.
What Happened
As reported by PC Gamer via 404 Media — and independently by Reuters, whose reporting was syndicated across outlets like CBC — a ShinyHunters representative said the group now holds data on "all" FBI employees and applicants. A data sample provided to 404 Media appeared to contain personal information on roughly 5,000 FBI employees: addresses, phone numbers, dates of birth, and in some cases details on spouses.
This isn't just a press release on a dark-web site. Reuters says it was able to partially verify the allegedly stolen personnel information by checking names and addresses against credit bureau records and previously breached data preserved by dark-web intelligence firms. In other words: at least some of the sample is real.
The FBI's recruitment portal, FBIjobs.gov, was also defaced with a message reading "this site has been seized by ShinyHunters" — a deliberate parody of the seizure notices the FBI itself slaps on cybercrime marketplaces after a raid. The site now shows a "down for maintenance" notice. An FBI spokesperson told 404 Media: "The FBI is aware of claims regarding unauthorized activity affecting FBIjobs.gov and is currently investigating."
According to additional reporting from Computing, the group claims it got in through a previously unknown vulnerability in Oracle PeopleSoft — software widely used for HR and recruitment — enabling remote code execution before moving into cloud-hosted environments. The group puts the total haul at 2–3TB of data. Treat those specifics as claims for now; the technique hasn't been independently confirmed.
The strangest detail is the motive. The same representative said the attack was not financially motivated, describing what comes next as "not something I'd call extortion, maybe coercion." By the group's own account, this is retaliation: the FBI published a public advisory in May 2026 accusing ShinyHunters of exaggerating its access to scare victims into paying, and of harassment tactics that included threatening calls and even swatting. ShinyHunters denied the allegations on its site and gave the Bureau "a time of one week" to correct the record. What happens after that week is exactly as unclear as it sounds.
Why GTA 6 Fans Know This Name
If "ShinyHunters" rings a bell, it should. Earlier this year the same group took credit for a breach of Rockstar Games' systems — reportedly reaching the studio's data through a compromised third-party cloud analytics vendor — and issued a pay-or-leak ultimatum with an April 14, 2026 deadline. Rockstar's response at the time was carefully worded: a "limited amount of non-material company information" was accessed, and nothing indicated GTA 6's development or its November 19 release date was affected.
The group's roots in the GTA ecosystem arguably go deeper still. Security researchers have linked ShinyHunters to the Lapsus$ crew of 2022 infamy — the teenage-led group whose member Arion Kurtaj leaked 90 clips of early GTA 6 footage from a hotel room using an Amazon Fire TV Stick. And just this month, a 192GB trove of GTA 5 source code surfaced online containing scrapped Liberty City DLC and early GTA 6 map work, with reporting that traced the material's provenance back to that same 2022 breach. When we covered what dataminers found inside that leak, the Lapsus$ connection was front and center.
Kurtaj himself was ultimately handed an indefinite hospital order by a UK court — but the group's identity didn't die with that conviction. The FBI's May advisory describes a still-active extortion enterprise, and researchers have tied ShinyHunters' techniques (credential theft, third-party pivots, double extortion) to Lapsus$' old playbook. The names shuffle; the target list just gets more ambitious.
Rockstar and its parent Take-Two have spent the weeks since aggressively scrubbing that material from the internet — issuing takedowns and subpoenaing records to hunt everyone who spread it. That crackdown is the direct context for this FBI story: the company is litigating the last leak while the group behind the 2026 ransom attempt is allegedly busy taunting the agency that wrote the playbook warning about it.
What This Means for GTA 6
First, the part that actually matters to players: nothing in this story touches GTA 6's release. The FBI claims involve federal HR systems, not game development. GTA 6 launches November 19, 2026 on PS5 and Xbox Series X|S, exactly as Rockstar has said all year — preloads included, starting November 12. If ShinyHunters were sitting on playable GTA 6 material, its chosen feud right now is with the FBI, not with a game studio.
What the story does show is the sheer gravitational pull of this launch. A group with a documented GTA ransom attempt on its resume now treats breaching the FBI — and parodying its seizure banners — as the flex that gets attention. The Bureau's own May advisory exists partly because game, tech, and telecom firms have become these groups' favorite targets, and Rockstar's decade-long leak history makes it the highest-value logo in that entire ecosystem. GTA 6 isn't just the biggest entertainment release of the year; it's the backdrop against which cybercrime folklore is being written in real time.
It's also a reminder of how much of GTA 6's final stretch is being fought off-screen. Between Take-Two's takedown campaign, the leaked-source firestorm, a Glasgow employment tribunal over Rockstar's layoffs, and now this, the eight weeks before launch are as much a legal and security story as a marketing one. The safest assumption: Rockstar's internal lockdown through November 19 will be absolute, and anything claiming to be leaked GTA 6 material should be treated as unverified until Rockstar says otherwise.
While the FBI and a hacker crew sort out their week-long ultimatum, the rest of us can just… wait it out legally. If you need help filling the final 8 weeks, we've got a whole survival guide for exactly that.
Secure Your Own November 19
No hacking required — you can pre-order GTA 6 for PS5 on Amazon or grab the Xbox Series X|S version here, with preloads opening November 12.
Want GTA 6 news the second it drops? Join the Locals — free newsletter, no spam.
As an Amazon Associate, I earn from qualifying purchases.
Related reading: Take-Two is scrubbing the GTA 5 leak from the internet · Inside the 2015 GTA 6 map leak · The 192GB GTA 5 leak and the scrapped Liberty City DLC · Things to do while waiting for GTA 6