A major cybersecurity incident has exposed sensitive personal information belonging to thousands of FBI employees, highlighting the growing risks facing U.S. government technology systems.

According to Reuters, an Accenture contractor working on an FBI employment website was removed after a critical Oracle PeopleSoft security patch was not applied. Hackers linked to the ShinyHunters group reportedly exploited the vulnerability to access sensitive information.

The exposed information reportedly included job descriptions, addresses associated with human intelligence personnel and medical records, making the incident a significant operational-security concern. Oracle had previously issued a security alert about the vulnerability and urged customers to install the required update.

The FBI has begun mitigation measures and is assessing the full impact of the breach. The incident underscores the importance of rapid software patching, cybersecurity monitoring and third-party contractor security across U.S. government systems.